Global staff can join and see private battle rooms

Should be consistent as above and use `!(targetRoom.type === 'battle' && user.can('lock'))`, no?