Admins (only) can destroy users