Constant ADMINS_GROUP 

pub const ADMINS_GROUP: &'static str;

The reserved group whose membership is admin-ness – AuthContext::is_admin is exactly “does this caller’s closure contain this name”.