Thanks... I figured that would be there, but I was somewhat surprised by its simplicity and extendability.
But, now my question becomes, should I grant to my new admin user, admin on the security_context_root object?
-Jim