requireAdministrator
asInvoker
highestAvailable