user: prevent illegal admin rights acquisition