stab at outlines for sudo
    /run/sudo is real messy, it gets created via a lib
    who ever runs sudo first gets his user and role identifiers associated with /run/sudo

    i worked around that by adding a roletrans... however...

    now i need to associate the user of whoever runs sudo with the sys.r role... (call sys_userrole (staff.u))

    all-in-all a ugly hack

    This sudo policy should have been a good example of how namespaces can be put to work

    Except that it is not... Either namespaces are above my pay-grade or they aren't as compelling as i thought they would be