IIRC, that's not quite correct. I haven't done any Cocoa recently that required root privileges, but most of the time you mark a task as requiring admin access, and the use is then prompted for a password (normally. If the current logged in user is an admin, and has no password, it will pass through I think). It asks for any user, but just fills in the user name for the currently logged in user if it's an admin. Basically, it will ask for a PW any time it needs sudo, no matter the user (unless the user is root).