its something I'm working on too. Attribution of privileged users is really annoying