This implements the Untrusted Multi-Project Configuration spec. This allows certain untrusted projects to be permitted (via the tenant configuration file) to configure the project-pipeline configs of other projects. Change-Id: I87039bd51be142ffa1f98772c8bcef4340ce83c8