Add validation for new_user_signups_cap enabling

Enabling the User Cap setting for a root group should only be possible
if the group or any of it's subgroups have not been shared outside
of the root group's hierarchy

Changelog: changed
EE: true