Shuffle the auth.superuser filter to a Route group