The process ID should be controlled by user ID and the the user ID regulated by group ID like in Windows. The system is its own group ID and shares credentials with the Administrator account if I understand correctly. I know in XP alot of bizarre/erradic behaviors are displayed if the Administrator account is corrupted.
Wouldn't prompting for a SU merely require one to capture flags for processes that run into ACL violations?