Allow admins to promote a secondary email to a primary
Admins and co-admins need to be provided with a way, both in the admin console and via API, to promote a secondary email address to a primary email address while the "Prevent users from changing their primary email address" control is enabled. For security the swap should still be approved by the user. The current workaround to this problem is inefficient, as it requires the change to be rolled back and the user to make the adjustment themselves. When a co-admin rolls the change back, logs in as the user, and selects "Make Primary" next to a secondary email address, they're asked for a user's password before the change is even submitted to the user for approval. Also, rolling back the change for any amount of time opens up the possibility that other users can change their primary email address when we don't want them to.