superusers can set/unset superuser status