Hid grant/revoke super user priv button from non-super users to avoid confusion -- backend still validates requests