Make /lua and /luatransform administrator-only

These commands are far too dangerous to be runable by anyone other than the server administrator (think os.execute()).
Although you can avoid granting `server` to anyone, if you grant `privs` you have effectively granted it.
And some administrators may use the `/grant player all` shortcut.