Insular seems to rely on the inbuilt managed profiles to "run as" another user. Seems straightforward. I'll try it out!