Who has ACCOUNTADMIN in your Snowflake account? One read-only query to check

ACCOUNTADMIN can change billing, drop any database and grant itself anything else. Snowflake recommends keeping it to a small number of people, but grants pile up over time. This read-only query lists