When combined with Flatseal as an easy to use privilege granting system, it really is hard to beat.