I think you're right, they should be admin only. I'll look in to that when I get a chance (or you can if you're looking for stuff to do ;))... https://www.pivotaltracker.com/story/show/72555464