auth: add macros for other passwd access vectors
session
    session is admin
    admin can ptrace all services/admin apps (for debugging)
    TODO: ptrace all session apps (also unpriv apps)