census
Declarative provisioner of Unix access objects — role-accounts, groups, sudoers and limits — from a role-store. Outside the auth path.