allow configuration by superusers