> All I want it to do is: ensure authorization, raise privileges, call exec. And have an audit log? And clean the environment? In particular the path? Dynamic

> All I want it to do is: ensure authorization, raise privileges, call exec. And have an audit log? And clean the environment? In particular the path? Dynamic library path? Still, I suspect "ensure autz" is the problem (implies Pam, 2fa, kerberos, etc etc).