Keep player access restrictions intact when a player is replaced (#5785)

A user restricted to a single Universal Player wrapper lost that restriction (and gained access to every player) when the wrapper was automatically replaced by a native player, because an empty access filter means unrestricted. The filter now follows the replacement.

Filter changes are also applied to already connected sessions, so a removal, replacement or admin change no longer needs a reconnect.