Command support for dual (two-person) authorization

[Matt Titmus]

Some actions may require an especially high level of security to prevent accidental of malicious execution.

For these we should allow commands to require a two-man rule.