[gh-696] Make Primary Base URL disabled for anyone but admin

No one else really needs to touch it - they just screw it up anyway.