This patchset contains the remaining patches from the first set
rebased against the current head with the whitespace errors removed.
Additionally it incorporates more fixes from the list of tasks
from the controller audit, specifically:
* ensuring user has access to hwps retrieved
* verifying privileges on instances retrieved in an edge case
where it previously wasn't handled
* requiring access to config_server's provider account to test
the connection
* requiring Privilege::PRIV_VIEW to access roles
* require access to a realms provider when accessing realms
* correctly setting provider_account in provider_accounts_controller
destroy method (previously wasn't set but was never caught as we
currently using multi_destroy instead of destroy)