VMWare and most applications that do this use Authorization Services. It's what pops up the dialog asking you to enter your password. Feels pretty magic to use it.

https://developer.apple.com/library/mac/#documentation/Secur...