Clients can retrieve arbitrary users notification preferences

 - notification_preferences.admin scope is required

[#79198782]