is this open for non admins to set isAdmin to true for any account?