restrict access to appreg to admin