So the solution would be "stick to the GUI because we didn't get to build up a secure procedure for the system administrator to do this stuff via command line"? Useful, indeed