Merge "Disallow work profiles on non-initial users in headless"