INVALID_ADMIN_REQUIRED should be 403.