prevent users from elevating their role