Use CAS
We somehow need to use SPI's CAS for the admin interface, as creating users individually would be more than painful and sharing a single account would be untrackable and ugly.
Maybe we could parse the .rhosts file to allow only BOcaleu·ses·x?