proxy: only ROLE_MOD_LDAPADMIN can access /ldapadmin/privateui - see #571