make _db_updates admin-only
Merge pull request #3 from janl/admin-only

make _db_updates admin-only