Stronger manager PIN controls

Manager PIN policies apply consistently to POS staff, including protected order status changes and voids. Merchant staff cannot alter the security policy.