Should a CA ACF2 logonid ever have both the STC and the RESTRICT privilege?