Of the two suggested solutions, I would prefer the second. Better yet,
you might consider investigating "sudo".

    The latest sudo may always be gotten via anonymous ftp
    from ftp.courtesan.com in the directory /pub/sudo/.

This has the advantage of extra logging and more fine grained control.
--
Hacksaw