Add config for device attachments to Global Config

- configurable devices_denied
- configurable auto-attach and required attachment

This is just the Global Config part.

requires QubesOS/qubes-core-admin-client#355

Author: marmarta