I suppose the restlet will need to invoke another script that is set to run as administrator. The option that would be the simplest to set up is the restlet calls a suitelet.