`combinedAuth` would allow any signed in user to retrieve the ENTIRE user database.  So I made it admin only ;)