rules: only display admin features to superuser