wideaccess instead firstrun on cmdline

Add the ability to restore world-wide administrative access anytime.