s3-lsa: add (not yet activate) level specific access checks for _lsa_QueryInfoPolicy.