make admin readonly with settings.READONLY is set