Only let admins merge accounts. Don't let non-admins see roles.