code: func NewAdminAuthServer(authServer *AuthServer, sessions session.Service, alog events.IAuditLog) (ClientI, error) {
  	ctx, err := NewAdminContext()
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  	return &AuthWithRoles{
  		authServer: authServer,
  		checker:    ctx.Checker,
  		user:       ctx.User,
  		alog:       alog,
  		sessions:   sessions,
  	}, nil
  }
docs: // NewAdminAuthServer returns auth server authorized as admin,
  // used for auth server cached access