https://www.pivotaltracker.com/story/show/69475456
when clients.admin failed to evaluate, it would trickle down and succeed under clients.write
Adjust tests that require clients.admin scope