secure sgwi from non-admins