> I'd recommend that we build a more generic mechanism that allows us to
> delegate privilege to daemons like ntp for just certain calls.

You mean like Linux does?