Yeah I meant more when folk `ssh root@host` over `su - root` But I do recall it being a lot more pleasant tracing who ran what sequence of commands, on a host

Yeah I meant more when folk `ssh root@host` over `su - root` But I do recall it being a lot more pleasant tracing who ran what sequence of commands, on a host used by many people in concurrent workflows, when it's sudo over su. It's also been some ~20 years since I've been in a role that required I do this so I (most probably) have forgotten a lot.