I just did. Use the admin permission for fields that you only want the admin to add. Then password protect the directory where your database file is located...best method is to use .htaccess/.htpasswd.
Regards,
Eliot Lee
Regards,
Eliot Lee