added capabilities check on zone export callback

This is per request from VIP here:  https://wordpressvip.zendesk.com/requests/22249

Added capabilities check on the callback function.