Consider multi-user accounts (sys-gui?) #1478
Description
Description
As discussion on #1332 proceeds, it's important to separate admin from that of individual journalists. If that were to be possible in Qubes, one could also consider having multiple Qubes accounts.
Apparently the GUI domain may kind of may allow this, even though this was not the purpose. So it's something that may happen at some point, but is yet TDB in terms of timeline.
This discussion is slightly related to #1460
How will this impact SecureDrop/SecureDrop Workstation users?
Depends on user-switching implementation.
How would this affect the SecureDrop Workstation threat model?
Needs to be evaluated if it has practical positive impact on threat model. Otherwise it's not worth pursuing.