How can you easily delegate and revoke privileged UNIX administration without having to manage sudo files or allow full root access? How often should passwords on privileged accounts be changed?