I wish these things were straightforward but.....please note that if you let
a non-root user call dsmc via sudo or other programs they can effectively
find a way to log on as root or run commands as root.

Remember dsmc can be used to restore files too so they could, say, restore
their own version of the passwd file, create a .rhosts, hosts.equiv and so
on.

Regards
Alan