all /superadmin resources are now read-only