Do not expose merge functionality no non-admin users

Signed-off-by: Yury Tsarev <ytsarev@suse.com>