SecurityManager: better userId handling, ability to check whether any ID belongs to superuser IDs