Lock down databases to '_admin' and 'vaulter' roles