This allows the script been used with normal user security roles,
   since only account_module is cause restrict access (by the current
   usage).

   destination section can be an organisation, so use shadow to avoid
   relax security.