This fix ensures regular users can no longer create account types through document accounting or subscription workflows. It protects core accounting configuration from unintended changes, while preserving access for the super user when needed.

Nobody should be able to create account types, so no users (except the
super user) is able to do it anymore)

opw:2497616