Admin: restrict access to admin users.