SERVER-11388 Only allow roles to have privileges on their own database, unless the role is on the 'admin' db