endpoint to be accessible to homeserver admins.

There was no need to lock it down to only global admins.