[actback] make actback command admin only