[CBM] Allow map/include/exclude flags to be used when restoring users

What is the problem?
To limit the scope of Trinity we decided to disallow restoring users when using the -include-data, exclude-data and -map-data flags. The current API does not have this ability and in some cases it is unclear what the correct UX is.

What is the solution?
We should coordinate with the ns_server team to decide on an API and what it should do. We mostly know what we would like to do but there are still some outstanding questions on the design doc.