We have to somehow protect the admin actions. Otherwise people can mess with it.