Discussion point

Maybe we should run generic tasks with a dedicated user, that way we can limit
the allowed commands or even allow commands which need sudo.

Something like this:
https://at.magma-soft.at/sw/blog/posts/The_Only_Way_For_SSH_Forced_Commands/
or this:
https://stackoverflow.com/a/50067008

Author: vmcj