The admin check is just to allow admins to run a script outside of the logon process. Since a user doesn't normally run a script outside of the logon process it won't matter to them.

The user will only be able to run the decrypt function while logging on. That's to prevent them from just writing their own script to decrypt it later.
_________________________
Stevie