maybe you want to pass `is_superuser` in there?