protect user from self-deletion