And if they have that, imagine what the more clever sysadmins can work they way into without proper authorization...