I like seeing qmail as blueprint how a secure app that needs elevates permissions should be designed, in fact it has 7 users.