hook: Restrict the config command to admins.

The README already mentions we do this, turns out we didn't :P.