s4 dns: Check if signing user is allowed to update records