Refactor options for run manager and abstract session

I think we need to whitelist 'user' too