limit users who can merge profiles

When duplicate MRN are created for a patient (due to misspelled name, change of name etc) we need to limit the number of users in the entire system that can merge the profiles to the one MRN. Currently it is Security switch #15 that needs to be set to N in order to limit this, but that switch is needed in other ways for many other roles.