Admin bench create/drop accept install.sh's scoped nginx sudo grant

Admin API bench create/drop now check scoped nginx sudo grant instead of bare sudo, fixing bench operations on install.sh-provisioned hosts.