Explicitly mark is_admin as protected.