SERVER-13804 add necessary privilege to the built-in restore role
(cherry picked from commit b1e42ae09dbcf45e5b35b787743bb183930b20a9)