administrative privileges should not be required by default