tlwebaccess only requires root for a few things, so we should avoid running as root except for those cases. The things that require root are: - Starting tlstunnel. - PAM authentication. These require us to run as the relevant user (or root): - Talking to vsmmaster - Verifying session info on the agent.