[lastreport] make this admin-only