[#2192] use admin kw for repl and query clean repls

rsDataObjRepl required the ADMIN_KW to repl for other users.
also added a query for only clean replicas when looking for a
source for replication.