reserve the ability to manage apps and config to the superuser