Tighten access and restructure

New teams hold only their creator, custom roles carry only capabilities their creator holds, and signing in as Administrator needs `server:console`. Also restructures the code.