Secure admin resources, and allow LO console admins to invoke everything