flux-security
flux-security provides the security infrastructure required for multi-user Flux instances. It includes a signing library that allows Flux to authenticate job requests across nodes, and a setuid helper called the IMP (Independent Minister of Privilege) that enables Flux to launch jobs as arbitrary users without requiring the broker to run as root.
flux-security is a required companion to flux-core in production HPC deployments where Flux is deployed as a multi-user system service. It is designed with a minimal privilege footprint: the IMP is the only component that runs as root, and it does so only for the narrow operations required to launch and signal jobs on behalf of authenticated users.