Fixes to prevent realm administrators becoming system administrators.