Currently, it is possible for an admin to impersonate a new user and accept the Terms & Conditions are behalf of that user.
This provides a risk to clients.
A solution could be to remove the ability to accept T&C's when impersonating. Or provide a pop-up warning message.
