su_local_root

Set up local accounts corresponding to Kerberos root principals. These accounts can then use sudo to gain elevated privileges.