admin("alice");
admin("bob");
allow if user($username), admin($username);