updated so only the admin can enumerate clients

this fixes #21