This makes me want some kind of the OS X "System Integrity Protection", but for CentOS and Ubuntu. I mean there HAS to be something like this? Maybe this is what the substitute user is all about and I just kinda suck!