generalize admin namespace, fallback if not authed