Sorry to resurrect a long-dead thread, but there's a one-line solution
to this instead of writing temp files. Using "admin" instead of "deny"
will give the desired effect of requiring administrator access again.
security authorizationdb write system....