updater: don't ask for admin rights when not needed