Rework admin privileges

This PR reworks how (system) privileges in general and especially admin privileges work. This must not be confused with the planned support for item privileges in a later release.