Add acl test cases for secret api 'read' and 'getattr'

By default, access for secret api 'read' and 'getattr' is granted for unprivileged user, add test cases in secret_list and secret_dumpxml to cover this.
Should we make sure this user exist?