Isn't it possible for the program to rewrite its own argv0 and/or parameters that would show up in ps/proc/etc when accessed by other uid's? But that may be subject to determination by race. So also, examine the -h and -H options used in pw here: http://svnweb.freebsd.org/base/releng/9.0/usr.sbin/pw/