Restrict admin from performing non-admin operations

Change-Id: Iabeccc47ddebcc163cb47261e306b349210c5b0d
Reviewed-on: http://reviews.cloudfoundry.org/13607
Tested-by: CI Master <cf-ci@rbcon.com>
Reviewed-by: Maria Shaldybina <mariash@vmware.com>