`is_superuser` is only checked if an app gets passed in, which we'll never do after a post, so looks like we're okay without it.  ([template reference](https://github.com/dimagi/commcare-hq/blob/fix-empty-app-import/corehq/apps/app_manager/templates/app_manager/import_app.html#L40))