Would be good to label it "authenticated RCE" to make this clear