One admin can't revoke another admin

There is an admin email address in your config file (app.yml)

The setting is called

DISCOURSE_DEVELOPER_EMAILS:

That admin with that specific email address, will always have admin rights even if others try to remove it.