No single user should ever have 'do 
everything' rights once the system is running multiuser.
    

That's fine if you are willing to pay 3 people to do one job and
spy on each other.  So far no place I've worked has done that.

That sounds to me like a taxpayer-funded environment :-))

RJ