(and I don't want to give access to the whole OS to content admins)