Explain the cinder user model and how policies can be used to configure API call access. Includes a detailed example of how to configure a read-only administrator. Change-Id: Id563e7340727cead9d284d6e991ed018502e7f04