exclude superadmins from security - fix