Comment 2 for bug 1378936

It can be argued it's a security issue, but it's a minor one -- someone can trick another user to using a specific image instead of the default.

Anyway, let's disallow this for non-admin users. Explicitly, if you're not an admin, you can't change the OS/Release information until it's acquired.