One-time setup. Disabled after first admin is created.