SU_LOGIN can either be a string or a callable

This will allow, for example:

    SU_LOGIN = lambda u: u.is_superuser