make _db_updates admin-only

db updates include the database name which in turn can include admin-only data.