Add guard on lo3 command.
Correct permission handling for admins.