I guess this is as good a time to ask as any.

Is it possible for a process to authenticate a user without root privileges, including setuid/setgid?