Control and Accountability for Privileged Users