State limitations should be allowed on manage_locations.

This can be useful in scenarios such as when you have assigned a role with a subtree limitation that allows manage_locations but you want to mark specific items as non-removable via state.