preliminary adminserv access flags, still slightly buggy