diff --git a/r2/r2/lib/validator/validator.py b/r2/r2/lib/validator/validator.py
index 48860fa85..e788ab801 100644
--- a/r2/r2/lib/validator/validator.py
+++ b/r2/r2/lib/validator/validator.py
@@ -905,6 +905,12 @@ def make_or_admin_secret_cls(base_cls):
                                                 g.secrets["ADMINSECRET"]):
                 return True
             super(VOrAdminSecret, self).run()
+
+            # import here so that we don't close around VModhash
+            # before r2admin can override
+            from r2.lib.validator import VModhash
+            VModhash(fatal=True).run(request.POST.get("uh"))
+
             return False
     return VOrAdminSecret