Get rid of admin group, move functionality to admin user + ACLs