That may be true, but it doesn't help. Impersonating another person could plausibly be construed as accessing a system without permission -- a federal offense,

That may be true, but it doesn't help. Impersonating another person could plausibly be construed as accessing a system without permission -- a federal offense, I believe. Couple that with things that likely include classified information, if the director included that kind of thing, and anyone who accesses his account could be facing a very aggressive prosecution.