Hacker News Reader

You could easily make a root-privileged daemon that listens for requests to install packages from users in a particular group.

You'd need to vet the packages you install, because otherwise you can install a package which executes arbitrary code during installation.

Puppet, Chef etc