Move system db owner check to AccessControl