Validators should all agree for a service user to be valid and should be configurable

Currently, we only require any validator to validate a service user to make it valid. In case we have more than one validator they should instead all validate a service user to make it valid.

Furthermore, we right now restart the mappings for each validator that arrives - we should make the required validators configurable to make sure we have all we want when we start validating.