When a "admin user" creates (or deletes, or updates) a MobileVariant construct, the access to the server needs to be protected.