freerdp: add restricted admin option