Only allow superusers to change permissions