Technically, canceling does not require the admin token.