[xon] username restrictions

Prevents users from selecting a username which matches user groups. Ensures user group mentions works as expected. Prevents explicit matches. Optionally prevent partial matches. Optionally enforce on administrators.