stats: use IsAdmin (check for umode +a) instead of privset.

The reason for this is because it breaks admin-only commands on remote,
because remote servers do not know a user's privsets.