Function check_admin 

pub fn check_admin(cap: &Cap, cell: &RevocationCell) -> Result<(), AdminError>

Scheduler-level ops (kill, inspect, quota top-up) all pass this check.