permission escalation problem with herald. the temporary fix is to restrict the command flag to admins. thanks sunnyD