Don't allow server admins to bypass user_may_join_room callback

It's mostly used to track accepting invites, not actually blocking joins,
so it should be able to track everyone.