Add cvar for requiring admin flag for .setup.