admins don't have to specify a UID