Some ContainerResourceHolder tests require admin because they create users on the system.