Don't allow non-admin users to set administration flag on edit user form