[Samba] Only root can use net command, because of permissions of secrets.tdb

[Deft Developer]

It seems that I can only run "net ads" commands as sudo, otherwise I get an
error:

Failed to open /var/lib/samba/private/secrets.tdb

This is because secrets.tbd has the permissions 700.

This is the case even for listing users with the machine account:

net ads user -P

Is this the normal behavior? Is there a correct way to configure so that
ordinary users can use net without sudo?