authentication: add #high_staff?