I want to second that about storing the authentication data in the DB.

(-: If you have to, alias the "ls" command for the admins.

Write a command that looks into the db, writes out what users have access -- and then exec's "ls" with the in-parameters... :-)