I'll let sdm_check_admin return [ad_administrator_p], it doesn't do
anything else anyway (the only thing it does right now is return 1
when the user_id=4). I do think a site-wide-admin should have full
control over the SDM, so that fixup would not cause too much harm
anyway. I'll ask Ben