add 'only admin allow execute_query(SHOW|GRANT|REVOKE)'