[anonymous_union]

in some other systems the concept has become overloaded. instead of multiple real people as users, different software with different permissions are different users. its not a bad abstraction.

[airocker]

Maybe containers are a better way of isolating processes as mentioned in other comments.