Splits privileges between an unprivileged user account and a separate sysmaint account - View it on GitHub