Move logic for checking CA status (locked or non-unified) to userBlockFlags
So we see that information on get edits as well as get users.
This also includes the list of groups that the user is in.
Bug: 45631
Change-Id: I48124be7a047e0eee6fda96910dd8785ddaac4a8