There should be two prefs:

1) Mask/Unmask email addresses
2) Make email addresses visible to public / registered users / administrators

Also, the administrator check should check for the admin privilege instead of just doing isSuperUser()