remove sys::admin resource, using deploy::user