Windows Authentication location path Admin sitemap issue

I have a site that uses Windows Authentication and a sitemap with security trimming enabled and routing. There are top level folders called "Admin", "Reports", and "Program". The Reports folder is restricted to certain roles and the Program folder is open to all users. I want to restrict access to the pages in Admin to certain users. So I added the following to my Web.config:
<location path="Admin"> <system.web> <authorization> <allow users="dom\user1, dom\user2, dom\user3" /> <deny users="*" /> </authorization> </system.web> </location> If I login as a user with access to Admin the link (e.g. adminuser) to the Admin page appears in the menu and I can access the page. If login as user without access to Admin, but a Reports role (e.g. reportsuser), the link to the Admin page does ...