Have the server keep track of who has admin privileges, so it can check if they're allowed to run certain commands

[poperigby]

The admin variable should never be on the client side.