1. Refactor the class that determines edit access into a service
2. User with ID 1 is no longer editable by other users
3. Add a message on the role reorder form that says exactly what this module does
4. Add the option to flip the role hierarchy
5. Add the option for strict hierarchy check so that users can no longer edit users with equal roles