># You can even use sudo/ru/similar to keep the night watchman from 
># executing any commands other than /etc/init.d/* to minimize the
># damage that said person can do while still allowing for a big
># cost savings from not calling the skilled person.

>..and you can also write a wrapper script which would do what you need.
>If you have sudo/ru/whatever in place, you're a fool not to have scripts
>in place which perform specific tasks.

Exactly - they are called start/stop scripts and conventionally live
in /etc/*.d :-)

--sjg