added config option for restricting access to admins