add admin‑only attachments to invoices