Or perhaps RunNas Policy is probably best choice though if you can get it working correctly.