This requires somebody to first gain access to a less privileged account
on the system before they can try to gain access to the system account.