SERVER-13804 add necessary privilege to the built-in restore role