Add protection for initial hierarchy

During tenant init operation, bootstrap groups and members are being created. This initial hierarchy should be protected from modification. For example, if group A was added as a member to group B during bootstrap operation, then 4XX should be returned if anyone is trying to remove group A from group B.