better protection for non-admins on test site