policy: don't tear down user connections on VT switch (rh #614556)

policy: don't tear down user connections on VT switch (rh #614556)

PK's "allow_inactive" actually means "allow inactive *local* users", so
we do want to allow inactive local users to provide user connections.
We don't want to allow non-local inactive users to provide user connections.

So make the use-user-connections privilege match for both active and
inactive so we get the behavior we want.