where does this UI live? we definitely need to be 100% sure that only superusers can do this on both the front end and the back end.