security manager accepts array of super user ids