allow only kegmasters to tap kegs