CLOUDSTACK-4087: updateTemplatePermissions - derive domainId from the template owner, not from the operation caller