Restrict htaccess message to users with manage_shop_settings

Fixes issue #2676 

This seems particularly silly since all other messages include the capability check already...