Currently DarkConsole is enabled with the `darkconsole.enabled` configuration. I would like to restrict the usage of DarkConsole to a team who are responsible for maintaining our Phabricator install. As such, instead of just enable/disable it would be great if DarkConsole could be enabled with policies.