Lock down items in 'more' to administrators only (NB currently using made-up permissions in permission_required decorators, to effectively behave as 'superuser required')