We set this request as admin here; this will be removed from the hash within the identity v2 service before we fire the request against the endpoint. It made sense to decorate the hash here because this is the correct spot to *unambiguously* determine if a request is admin/non-admin.