Give registrar group read access to some attributes again, and reduce users access added in previous commit