#309: admin can specify other users as admins