There should be a way to configure trusted users and actions. These actions are only allowed to be performed by the trusted users.