lsa: add access_masks for accounts, secrets and trusted domains to IDL.