May be it's time to document that source-server connection in pg_rewind must be non-replication and with superuser access. Consider this small patch for documentation.
+1.
Just reminder, may be someone missed previous message. If this correction does not make sense, we can forget it.