Move the local-admin-only, it was being ignored in its old location