Using bit-wise OR only strengthens the requirement.
The root flag will always have access to everything so just set it to ADMFLAG_GENERIC
For example the following snippet will require
both generic and slay privileges, not either or.
PHP Code:
RegAdminCmd("sm_test", SomeCallback, ADMFLAG_GENERIC|ADMFLAG_SLAY);