https://www.sans.org/reading-room/whitepapers/privilege/introduction-rundeck-secure-script-executions-37162