If an admin user has permission to manage other users, they are able to set others as superuser, or even create their own superuser account. That's not really what we want.