s4-dsdb: require admin access for DsReplicaGetInfo