second draft. already-existed shares now work too, 'localroot' stuff was moved to server-side, admin check