only superuser should be able to reply