Question 1: i'm not familiar with ssh (although i know what it's all about) but as far as i can tell it's a, what i would call, "partial authority" problem.
the regular user may have got rights to...