Remove the context menus that would do nothing if access to those KCMs is restricted.
Don't indicate clickable area with pointy cursor for Kickoff user avatar if restricted.
Also fix trash desktop file name.

Added the respective KCM desktop file names to [KDE Control Module Restrictions]:

• Didn't get a "Configure" entry for Trash
• No more pointy finger on Kickoff user avatar

Confirmed that KCMShell refused to open and Dolphin / System Settings didn't list; still works when no restriction is set.
KTP applet, Printer Manager applet and potentially others would need to be adjusted still.