Make sure normal users can't do anything