feat: implement restrict policy for DROP USER

Summary

• feat: implement restrict policy for DROP USER

---

Ref: sbroad!499 (closed)

• Close #848 (closed), #746 (closed)
• Cherry-pick to: none
• Docs follow-up: docs#370 (closed)