[#2440] ADMIN_KW is propagated into genQuery

ADMIN_KW is now copied into the genQueryInp condInput, and the
permissions checking for a gen_query now gives ADMIN_KW a free pass