Bug 9040: avoid using dynamicAuthorization for cluster-admin operations