On Mon, Jul 27, 2015 at 02:40:53PM +0200, Theo Buehler wrote: > So omitting [as identity] allows me to run as every user, not just as > root? Is this intentional?
I think it's intentional. It's definitely what I would expect [as identity] is a restrictive modifier. If you want to only be able to run as root, you write "as root". How would you phrase things if it wasn't the case ?..