s4-drsuapi: Clarify role of drs_security_access_check_nc_root()