Allow Institutional admin user to turn individual bento boxes on/off

What we allow inst admin users to do is grouped together, so See: #625 (moved)