We think it is reaosnable, security-wise, and a special priviledged service (perhaps non-internet facing), could have access via auth to impersonate any user (for admin operations)