UI will not be perfect but this should work for controlling who can
 create/restore snapshots.
The ACL for seeing snapshots is not respected yet.

issue #5743