This doesn't really belong in `tags.js`.  Split it out into another module that's just about doing user admin checks.