Description of problem:
If non-admin user performs pwpolicy-show operation, then command returns following error 

# ipa pwpolicy-show
ipa: ERROR: None: password policy not found

Version-Release number of selected component (if applicable):
ipa-server-4.2.0-15.el7_2.3.x86_64

How reproducible:
100%


Steps to Reproduce:

# echo Secret123 | kinit admin
Password for admin: 
# echo Passw0rd1 | ipa user-add --first abc --last abc abc --password
----------------
Added user "abc"
----------------
  User login: abc
  First name: abc
  Last name: abc
  Full name: abc abc
  Display name: abc abc
  Initials: aa
  Home directory: /home/abc
  GECOS: abc abc
  Login shell: /bin/sh
  Kerberos principal: abc
  Email address: abc
  UID: 327400005
  GID: 327400005
  Password: True
  Member of groups: ipausers
  Kerberos keys available: True
# kinit abc
Password for abc: 
Password expired.  You must change it now.
Enter new password: 
Enter it again: 
Password mismatch.  Please try again.
Enter new password: 
Enter it again: 
# ipa pwpolicy-show
ipa: ERROR: None: password policy not found


Actual results:
Error message "ipa: ERROR: None: password policy not found"

Expected results:
Error message should be similar to "Check your permissions" or "Insufficient access: Insufficient 'delete' privilege to delete the entry "

Additional info:
same case goes with ipa pwpolicy-mod