Sign in

Trifecta Tech Foundation

@trifectatech.bsky.social
196 followers 72 following 54 posts

Open infrastructure software in the public interest. Maintainer of utilities and libraries for time synchronization, data compression, and on privilege boundaries. Projects: sudo-rs, ntpd-rs, statime, zlib-rs and more on trifectatech.org.

PostsRepliesMedia
Trifecta Tech Foundation @trifectatech.bsky.social · 14/09/2026
Trifecta Tech Foundation is delighted to welcome Google as a new Gold sponsor! Read more on trifectatech.org/blog/new-gol... With thanks to Google's OSPO, @opensource.google, and the Safe Coding Engineering team!
0122
Trifecta Tech Foundation @trifectatech.bsky.social · 04/09/2026
It's great to see @sovereign.tech and @bsi.bund.de supporting the call for #MemorySafety incentives in EU cybersecurity policies! Their vision: www.sovereign.tech/news/europea... The statement was co-authored by @tarakiyee.bsky.social and our own @hugovandepol.bsky.social @tweedegolf.bsky.social
sovereign.tech
Endorsing a statement on European memory safety | Sovereign Tech…
By Tara Tarakiyee (Sovereign Tech Agency) & Yona Raekow (German Federal Office for Information Security)
142
Trifecta Tech Foundation @trifectatech.bsky.social · 30/06/2026
Trifecta Tech Foundation is delighted to welcome Canonical as a new Gold sponsor! Read more on trifectatech.org/blog/new-gol... @canonicalltd.bsky.social
0182
Trifecta Tech Foundation @trifectatech.bsky.social · 16/06/2026
We're excited to share that Firefox now uses zlib-rs for gzip (de)compression. This has both performance and safety advantages, but it took a while to get zlib-rs into production. Read why: trifectatech.org/blog/zlib-rs... Thanks to @gabrielesvelto.mas.to.ap.brid.gy and @mozilla.org #rustlang
trifectatech.org
zlib-rs in Firefox - Trifecta Tech Foundation
As of 151.0.0, Firefox uses zlib-rs for gzip (de)compression. This is very exciting, and has both performance and safety advantages.
0346
Trifecta Tech Foundation @trifectatech.bsky.social · 01/06/2026
We're proud to announce the first release of our latest data compression project, Zstandard in Rust! Read why we did this, the current state of the project, and where we're hoping to take it: buff.ly/JoruN7e Thanks to Chainguard, Astral, NLnet Foundation, and @sovereign.tech. #rustlang #opensource
trifectatech.org
Announcing Zstandard in Rust - Trifecta Tech Foundation
Over the past year, we've been silently working on our third compression project. After zlib and bzip2 we're now taking on zstd with libzstd-rs-sys, and are proud to announce its first release.
14914
Trifecta Tech Foundation @trifectatech.bsky.social · 29/04/2026
Almost three years ago, sudo-rs was announced to the world. Just last week, it became the default sudo utility in the Ubuntu LTS release Resolute Raccoon. Now is a good time to reflect: trifectatech.org/blog/three-y... #rustlang
trifectatech.org
Three years of Rusty sudo - Trifecta Tech Foundation
Almost three years ago, sudo-rs was announced to the world. Just last week, it became the default sudo implementation in the Ubuntu LTS release Resolute Raccoon. Now is a good time to reflect.
1141
Trifecta Tech Foundation @trifectatech.bsky.social · 14/04/2026
Folkert and Waffle have submitted a project goal to move explicit tail calls forward in 2026. In this blog, Folkert explains the work ahead: trifectatech.org/blog/tail-ca... @wffl.ihatereality.space #rustlang
trifectatech.org
Rust should have stable tail calls - Trifecta Tech Foundation
Tail calls in Rust have been talked about for a long time, but especially from the outside it looks like very little progress has been made. Let's change that!
1247
Trifecta Tech Foundation @trifectatech.bsky.social · 30/03/2026
In our data compression projects, we sometimes hit limitations in Rust itself and in the surrounding tooling. Folkert covers our contributions to the compiler and shows how we have become increasingly comfortable fixing these issues ourselves: trifectatech.org/blog/fixing-... #rustlang #opensource
trifectatech.org
Fixing our own problems in the Rust compiler - Trifecta Tech Foundation
In our data compression projects, we use Rust where C is traditionally used. During the work, we've hit limitations in Rust itself and in the surrounding tooling. Over the years, we've become…
0236
Trifecta Tech Foundation @trifectatech.bsky.social · 26/03/2026
** Announcement ** Ubuntu to adopt ntpd-rs as the default time synchronization client and server. Thanks to @canonicalltd.bsky.social for their continued support! trifectatech.org/blog/announc...
trifectatech.org
Ubuntu to adopt ntpd-rs as the default time synchronization client and server - Trifecta Tech Foundation
March 26, 2026 – Ubuntu is set to adopt ntpd-rs by default.
071
Trifecta Tech Foundation @trifectatech.bsky.social · 27/02/2026
ntpd-rs is coming to Ubuntu! In RustNation's closing keynote Canonical announced that we are preparing ntpd-rs, our Network Time Protocol implementation, for Ubuntu. Watch the keynote here: www.youtube.com/watch?v=WOA4... @jnsgr.uk @rustnationuk.bsky.social @ubuntu-ls.bsky.social #rustlang
RustNation's closing keynote Canonical announced that we are preparing ntpd-rs, our Network Time Protocol implementation, for Ubuntu. RustNation's closing keynote Canonical announced that we are preparing ntpd-rs, our Network Time Protocol implementation, for Ubuntu.
0122
Trifecta Tech Foundation @trifectatech.bsky.social · 03/02/2026
The Network Time Protocol is generally used completely unprotected, much like the web was before HTTPS. At FOSDEM 2026, Ruben explained how we aim to push adoption of secure time (NTS) using pools of NTS servers. Video and slides: buff.ly/O4sfBKg #fosdem2026 #opensource #timesynchronization
050
Trifecta Tech Foundation @trifectatech.bsky.social · 28/01/2026
Ruben is headed to FOSDEM! Catch his talk 'Securing time with NTS' on Sun 1 Feb at 13.20 in room H.2215 (Ferrer)! fosdem.org/2026/schedul... @fosdem.org #opensource #rustlang #fosdem
051
Trifecta Tech Foundation @trifectatech.bsky.social · 27/01/2026
Zlib-rs is now feature-complete! We've released v0.6, the first version with a stable and complete API. The blog post has the details. With thanks to our maintainer Folkert de Vries, our contributors and @sovereign.tech. trifectatech.org/blog/zlib-rs... #rust #rustlang
0135
Trifecta Tech Foundation @trifectatech.bsky.social · 13/01/2026
Sudo-rs maintainer Marc Schoolderman was invited to the 2025 Ubuntu Summit to talk about the design choices that shaped sudo-rs. Watch the talk here: trifectatech.org/blog/video-s... @canonicalltd.bsky.social #rustlang
trifectatech.org
Video: sudo-rs and beyond (Ubuntu Summit 25.10) - Trifecta Tech Foundation
After sudo-rs was included in the 25.10 release of Ubuntu, Marc was invited to the Ubuntu Summit to talk about the design choices that shaped sudo-rs. You can now watch the recording of the talk.
060
Trifecta Tech Foundation @trifectatech.bsky.social · 18/12/2025
New release of sudo-rs! Version 0.2.11 is out with askpass and multi-lingual support. Want to see sudo-rs in your language? You can start helping out today. PR's are welcome! We thank the @sovereign.tech for investing in this work, as well as 15 external contributors! github.com/trifectatech...
github.com
Releases · trifectatechfoundation/sudo-rs
A memory safe implementation of sudo and su. Contribute to trifectatechfoundation/sudo-rs development by creating an account on GitHub.
083
Trifecta Tech Foundation @trifectatech.bsky.social · 17/12/2025
The joint statement “Improving Europe's cybersecurity posture through memory safety”, has now been published: trifectatech.org/blog/calling... It calls for stronger #MemorySafety incentives in EU cybersecurity policies. Thanks to all supporters and contributors! #security
trifectatech.org
Calling for memory safety incentives in EU cybersecurity policies - Trifecta Tech Foundation
042
Trifecta Tech Foundation @trifectatech.bsky.social · 09/12/2025
How do you test code that a CI machine won't run? To support avx-512 SIMD instructions in zlib-rs, we taught Miri how to emulate them. trifectatech.org/blog/emulati... #rustlang
trifectatech.org
Emulating avx-512 intrinsics in Miri - Trifecta Tech Foundation
Recently we've started work on using more avx512 features in zlib-rs. The avx512 family of target features provides SIMD intrinsics that use 512-bit vectors (double the size of avx2, which uses…
072
Trifecta Tech Foundation @trifectatech.bsky.social · 01/12/2025
Canonical's Jon Seager talks about our sudo-rs and ntpd-rs (!) in ubuntu-ls.bsky.social, and his bold but level-headed vision on Rust's future for Ubuntu, in the Rust in Production podcast with Matthias Endler: corrode.dev/podcast/s05e... #rustlang #ubuntu @canonicalltd.bsky.social @jnsgr.uk
corrode.dev
Canonical with Jon Seager - Rust in Production Podcast | corrode Rust Consulting
What does it take to rewrite the fou…
061
Reposted by Trifecta Tech Foundation
The Rust Foundation @rustfoundation.org · 13/11/2025
The Rust Foundation has joined orgs across industry & open source to call for a more secure, memory-safe future for Europe. The path to safer digital infrastructure is clear — & it starts with modern, memory-safe tech. Read the joint statement & add your support:
trifectatech.org
Support the call for Memory Safety incentives in EU cybersecurity policies - Trifecta Tech Foundation
0145
Trifecta Tech Foundation @trifectatech.bsky.social · 12/11/2025
Please support the call for Memory Safety incentives in EU cybersecurity policies. If you agree with the position that memory safety should be on the EU and national cybersecurity agendas, please consider adding your name to this statement to show your support: trifectatech.org/blog/support... 1/3
trifectatech.org
Support the call for Memory Safety incentives in EU cybersecurity policies - Trifecta Tech Foundation
144
Trifecta Tech Foundation @trifectatech.bsky.social · 24/10/2025
Watch Marc's talk at the Ubuntu Summit in London, "Sudo-rs and beyond": www.youtube.com/live/bEEamxJ... @canonicalltd.bsky.social #rust #rustlang #ubuntu
youtube.com
Sudo-rs and beyond
031
Trifecta Tech Foundation @trifectatech.bsky.social · 09/10/2025
Ubuntu 25.10, running our sudo-rs as the default sudo, has just been released! "Rust-based implementations of sudo and coreutils for improved memory safety" canonical.com/blog/canonic... #rust #rustlang
canonical.com
Canonical releases Ubuntu 25.10 Questing Quokka | Canonical
The latest interim release of Ubuntu comes with compatibility enhancements at the silicon level, accessibility upgrades and a robust security posture that sets the stage for the next LTS. October 9,…
1389
Trifecta Tech Foundation @trifectatech.bsky.social · 07/10/2025
Two days until the release of sudo-rs in Ubuntu 25.10 🚀 Here is everything you always wanted to know about sudo-rs: trifectatech.org/blog/frequen... #rust #ubuntu #rustlang
trifectatech.org
Frequently Asked Questions about sudo-rs - Trifecta Tech Foundation
With sudo-rs coming to Ubuntu 25.10, the core team has collected and published the Frequently Asked Questions about sudo-rs. They will be updated if user curiosity calls for it.
051
Trifecta Tech Foundation @trifectatech.bsky.social · 10/09/2025
Blog post by Folkert: How can we make Rust programs that use state machines even faster? Trifecta Tech aims to create safe and robust infrastructure software, that's why we're dedicated to making Rust the go-to for performance-critical components like zlib&zstd. trifectatech.org/blog/improvi...
trifectatech.org
Improving state machine code generation - Trifecta Tech Foundation
Over the past couple of months, Björn and I have been working on improving state machine code generation in the rust compiler, a rust project goal for 2025H1. In late June, PR 138780 was merged,…
084
Trifecta Tech Foundation @trifectatech.bsky.social · 26/08/2025
** Major milestone ** our sudo-rs is the default sudo for the upcoming Ubuntu 🚀 🦀 More on the Ubuntu blog: discourse.ubuntu.com/t/sudo-rs-is... #rust #rustlang
Sudo-rs on Ubuntu
1246
Trifecta Tech Foundation @trifectatech.bsky.social · 19/07/2025
Ruben and David are the champions (how cool is that?) for the NTS Pool session at the @ietf.org 123 Hackathon! In parallel they will also work on NTPv5 interop testing and Network Time Security for PTP and CSPTP. wiki.ietf.org/en/meeting/1... #ietf123
NTS Pool at the IETF 123 Hackathon
011
Trifecta Tech Foundation @trifectatech.bsky.social · 18/07/2025
Our sudo-rs is headed to Ubuntu 25.10! Write-up about the impact of the project and the collaboration with @tweedegolf.bsky.social and @ferroussystems.bsky.social, by our friends and project initiators at Prossimo: www.memorysafety.org/blog/sudo-rs... #rustlang #rust
memorysafety.org
sudo-rs Headed to Ubuntu
Every day, system administrators all over the world ask their computers to perform security-sensitive tasks across privilege boundaries, such as a standard user executing a command as root. The softwa...
050
Reposted by Trifecta Tech Foundation
Tweede golf @tweedegolf.bsky.social · 18/07/2025
The success story of the memory-safe sudo-rs, the Rust implementation of the sudo command: www.memorysafety.org/blog/sudo-rs... Thanks to Prossimo, Ferrous Systems and Trifecta Tech Foundation 🙏 @ferroussystems.bsky.social @trifectatech.bsky.social #rustlang #memorysafety #cybersecurity
memorysafety.org
sudo-rs Headed to Ubuntu
Every day, system administrators all over the world ask their computers to perform security-sensitive tasks across privilege boundaries, such as a standard user executing a command as root. The softwa...
152
Trifecta Tech Foundation @trifectatech.bsky.social · 16/07/2025
David and Ruben are headed to Madrid for the 123rd @ietf.org meeting! They'll join the NTP WG and work on NTP version 5, an NTS pool, and better time synchronization in general. Come find them to talk all-things-time! More on NTPv5 & NTS: trifectatech.org/tags/ntpd-rs/ - Madrid 123 image by IETF
Artwork of IETF 123 Madrid 19-25 July 2025Trifecta Tech Foundation's David and Ruben in action at a PTP plugfestImage announcement ntpd-rs support for Network Time Protocol version 5
011
Trifecta Tech Foundation @trifectatech.bsky.social · 11/07/2025
Time just got better! ntpd-rs now optionally supports NTPv5, the next version of the Network Time Protocol. trifectatech.org/blog/ntpd-rs... #rustlang @sovereign.tech
trifectatech.org
ntpd-rs now supports version 5 of the Network Time Protocol - Trifecta Tech Foundation
042
Trifecta Tech Foundation @trifectatech.bsky.social · 04/07/2025
A new release of sudo-rs is out! Highlights: - Increased backwards compatibility with older Linux kernels. - Programs executed can be prevented from running other programs (NOEXEC) - Other usability improvements suggested and contributed by our users! #rust #rustlang github.com/trifectatech...
github.com
Release Version 0.2.7 · trifectatechfoundation/sudo-rs
To use the precompiled binaries attached below, consult our manual installation instructions Added Linux kernels older than 5.9 are now supported. Support for Defaults noexec/NOEXEC: on Linux syst...
051
Trifecta Tech Foundation @trifectatech.bsky.social · 17/06/2025
Today we're switching the bzip2 crate from C to 100% rust: trifectatech.org/blog/bzip2-c... Thanks to: Alex Crichton and Radically Open Security, and to NLnet Foundation for funding the work through the e-Commons fund with financial support from @minbzk.bsky.social‬ #rustlang #rust
trifectatech.org
bzip2 crate switches from C to 100% rust - Trifecta Tech Foundation
Today we published bzip2 version 0.6.0, which uses our rust implementation of the bzip2 algorithm, libbz2-rs-sys, by default. The bzip2 crate is now faster and easier to cross-compile.
0113
Reposted by Trifecta Tech Foundation
omg! ubuntu @omgubuntu.co.uk · 02/06/2025
ICYMI: Ubuntu 25.10 is to ship with a new version of 'sudo' written in Rust. #rustlang #ubuntu
omgubuntu.co.uk
Ubuntu 25.10 Switches to Rust-based Sudo
Ubuntu 25.10 will replace the sudo command with sudo-rs, a new Rust rewrite designed to improve memory safety and security. What does this mean for users?
0205
Trifecta Tech Foundation @trifectatech.bsky.social · 03/06/2025
We prefer to say "we'd love to be in your distro". Nevertheless, a really good "sudo-rs explained" by @brodierobertson.xyz‬. Thanks! www.youtube.com/watch?v=Le4i...
youtube.com
You Will Never Escape Rust Rewrites On Linux
Rust rewrites are kind of a long running joke in the world of Linux but soon you're not going to be able to escape them no matter how hard you try, Ubuntu 25...
1114
Trifecta Tech Foundation @trifectatech.bsky.social · 27/05/2025
Our data compression projects aim to offer best-in-class performance. @tweedegolf.bsky.social‬'s Folkert de Vries shows how SIMD helps us to speed up zlib-rs in compare256, a crucial part of the compression algorithm that finds repetitions in the input. trifectatech.org/blog/simd-in... #rustlang
trifectatech.org
SIMD in zlib-rs (part 2): compare256 - Trifecta Tech Foundation
In part 1 of the "SIMD in zlib-rs" series, we've seen that, with a bit of nudging, autovectorization can produce optimal code for some problems.
063
Trifecta Tech Foundation @trifectatech.bsky.social · 08/05/2025
Our sudo-rs work in The Register:
041
Trifecta Tech Foundation @trifectatech.bsky.social · 07/05/2025
Calling all Rust educators at RustWeek! Join us for the Rust Educators Speed Date at the Trifecta Tech Foundation table on Wednesday 14 May, 11.00am. Teach-rs maintainers Tamme and Marc would love to hear both your battle stories and questions about teaching Rust. #rustlang #RustWeek #education
122
Trifecta Tech Foundation @trifectatech.bsky.social · 07/05/2025
Trifecta Tech Foundation is now a member of the @rustfoundation.org ! Why? We believe that software must become safer; that this is paramount in critical infrastructure; and that #rustlang is an outstanding choice of technology for this purpose. rustfoundation.org/media/rust-f...
rustfoundation.org
Rust Foundation Associate Member Announcement | May 2025 - The Rust Foundation
DOVER, DELAWARE, May 6, 2025 –The Rust Foundation, an independent, nonprofit organization dedicated to advancing the performance, safety, and sustainability of the Rust programming language, is…
031
Trifecta Tech Foundation @trifectatech.bsky.social · 06/05/2025
* Announcement * Memory-safe sudo to become the default in Ubuntu! @canonicalltd.bsky.social is supporting us to get sudo-rs ready for Ubuntu 25.10.  trifectatech.org/blog/memory-...
trifectatech.org
Memory-safe sudo to become the default in Ubuntu - Trifecta Tech Foundation
May 6, 2025 – Ubuntu 25.10 is set to adopt sudo-rs by default. Sudo-rs is a memory-safe reimplementation of the widely-used sudo utility, written in the Rust programming language.
01713
Trifecta Tech Foundation @trifectatech.bsky.social · 25/04/2025
We're happy to see adoption for zlib-rs skyrocketing. Especially stoked about rust tooling like cargo, gitoxide and rustup 🚀 Special thanks to @josh.social.joshtriplett.org.ap.brid.gy github.com/rust-lang/ca... github.com/rust-lang/ru... github.com/GitoxideLabs...
github.com
use `zlib-rs` for gzip compression in rust code by folkertdev · Pull Request #15417 · rust-lang/cargo
What does this PR try to resolve? This PR uses zlib-rs via the flate2 crate. It is used for (de)compressing gzip files (e.g. in cargo package). Using zlib-rs is significantly faster, and produces o...
092
Trifecta Tech Foundation @trifectatech.bsky.social · 08/04/2025
New release: zlib-rs 0.5.0 🎉 We now allow using zlib-rs together with stock zlib or zlib-ng in the same project. This is a **breaking change** if you relied on Rust exporting C symbols. The export-symbols flag preserves the previous behavior. github.com/trifectatech... #rustlang #rust
github.com
Release v0.5.0 · trifectatechfoundation/zlib-rs
This is technically a breaking change, but unless you rely on rust exporting C symbols, you should not run into any issues when upgrading. highlights the export-symbols feature now controls whethe...
021
Trifecta Tech Foundation @trifectatech.bsky.social · 02/04/2025
New: sudo-rs supports FreeBSD + (highly anticipated!) "--bell" 🔔 Also in this release: the first contribution (bugfix) by Todd Miller, the maintainer of the original sudo - thank you! More thanks to our funder NLnet Foundation and our maintainers Marc and Bjorn. github.com/trifectatech...
github.com
Release Version 0.2.5 · trifectatechfoundation/sudo-rs
To use the precompiled binaries attached below, consult our manual installation instructions Added sudo visudo will protect you from accidentally locking yourself out Support for --prompt and SUDO...
031
Reposted by Trifecta Tech Foundation
Tweede golf @tweedegolf.bsky.social · 20/03/2025
sudo-rs might become the default in future Ubuntu releases! The details from Ubuntu VP of Engineering Jon Seager: buff.ly/axxif1t Our team, Marc, Bjorn, Ruben and Marlon are core contributors of sudo-rs, which is now part of Trifecta Tech Foundation. #rustlang #riir
buff.ly
Carefully But Purposefully Oxidising Ubuntu
Last month I published Engineering Ubuntu For The Next 20 Years, which outlines four key themes for how I intend to evolve Ubuntu in the coming years. In this post, I’ll focus on “Modernisation”.…
192
Reposted by Trifecta Tech Foundation
Internet Engineering Task Force @ietf.org · 16/03/2025
It's underway! The week of #IETF122 Bangkok hosted by Juniper Networks has kicked off with the #IETFHackathon. Select sessions are streamed live and all sessions are available on demand after the meeting. Find links and more information at: www.ietf.org/live/
042
Trifecta Tech Foundation @trifectatech.bsky.social · 14/03/2025
zlib-rs is now used in uv! uv is the extremely fast Python package & project manager with over 200M requests/day. Not only are we happy about the adoption but also grateful for Astral and @crmarsh.com stepping up and supporting us through a GitHub sponsorship. Thanks!
github.com
Migrate to `zlib-rs` (again) by charliermarsh · Pull Request #11894 · astral-sh/uv
Summary I believe zlib-rs is now a better choice on ARM and x86, so I'm just going to assume it's a better choice everywhere. It's much easier to build (removes our CMake dependency), a...
0285
Trifecta Tech Foundation @trifectatech.bsky.social · 13/03/2025
Huge news in this article by Ubuntu VP of Engineering @jnsgr.uk: Our sudo-rs and @uutils.bsky.social may become the default in Ubuntu in the future, as part of their strategy to move to memory safe code. discourse.ubuntu.com/t/carefully-...
discourse.ubuntu.com
Carefully But Purposefully Oxidising Ubuntu
Last month I published Engineering Ubuntu For The Next 20 Years, which outlines four key themes for how I intend to evolve Ubuntu in the coming years. In this post, I’ll focus on “Modernisation”. Ther...
042
Trifecta Tech Foundation @trifectatech.bsky.social · 11/03/2025
libbz2 is a 100% rust drop-in compatible implementation of the bzip2 compression library. We've translated it from the C original using c2rust. Check out Folkert's blog on our experience:
trifectatech.org
Translating bzip2 with c2rust - Trifecta Tech Foundation
Over the past couple of months we've been hard at work on libbzip2-rs, a 100% Rust drop-in compatible implementation the bzip2 compression and decompression functionality.
041
Trifecta Tech Foundation @trifectatech.bsky.social · 28/02/2025
New release of ntpd-rs, our Network Time Protocol implementation! Includes support for PPS (pulse per second) based sources. Fixes two low severity vulnerabilities in our NTS cookie parsing, found through YesWeHack's Bug Bounty program, supported by @sovereign.tech.
github.com
Release Version 1.5.0 · pendulum-project/ntpd-rs
This releases fixes two related low severity vulnerabilities in our NTS cookie parsing, please see the related advisory. Added Support for PPS based sources (this support can be disabled with a co...
043
Trifecta Tech Foundation @trifectatech.bsky.social · 27/02/2025
New release of sudo-rs, the memory safe implementation of sudo and su. Includes experimental support for FreeBSD and improved compatibility between sudo-rs and sudo. Special thanks to NLnet Foundation & Todd Miller, the maintainer of sudo. github.com/trifectatech...
github.com
Release Version 0.2.4 · trifectatechfoundation/sudo-rs
Added Support for 'SETENV:' and corresponding 'sudo VAR=value command' syntax Support for 'Defaults rootpw' Support for 'Defaults pwfeedback' Support for host/user/runas/command-specific Defaults ...
032