LPS-50574 use local service + explicit permission check

Otherwise, it will fail while checking permissions, as the KBFolder
won't exist anymore.