Reject some untrusted config objects

We do not permit pipelines to be defined in untrusted projects,
nor do we permit project definitions in untrusted project except
for the project itself.  Implement checks for these cases.

Change-Id: If8ce0bf151c2755a884e1861000556ac9dd3b44d
2 files changed