Implement support for running specific CLI commands as root

fixes #7380