9e30018134
this is security by default: all routes attached to /api/admin
will be by default authn + authz admin only