Lock down specific goals controller actions for admins only.