Enable handlers to redact applicant's attachments

Currently, only applicants can delete their own attachments. When applicant has deleted an attachment, it is still kept in the application history.

This is problematic if the attachment, for example, accidentally contains sensitive data.

This is why handlers should be able to delete (overwrite?) applicants' attachments.