s3-lsa: use LSA_ROLE definitions in _lsa_QueryInfoPolicy().