Fascinating that using a 0 (zero) instead of an O let them backdoor this.
function _setAdmin(address newAdmin) internal { bytes32 slot = ADMIN_SL0T;
assembly {
sstore(slot, newAdmin)
}
}