this makes more sense authadmin manages users

else sysadm adds users and authadm sets password (unwieldy)
call it all