don't record every match of allow_admin