i5431 only allow reference field for users with permission to administer payment methods

src/PluginForm/SepaPaymentMethodAddForm.php

@@ -73,6 +73,7 @@ class SepaPaymentMethodAddForm extends BasePaymentMethodAddForm {
       '#title' => t('Reference'),
       '#maxlength' => 34,
       '#description' => t('Reference of the mandate (leave empty to autogenerate)'),
+      '#access' => \Drupal::currentUser()->hasPermission('administer commerce_payment_method'),
     ];
 
     return $element;