How can I make it so the domain users I am allowing to make commits to cvs don't have privelege to the files directly on the filesystem? I've tried using runas but get errors every time it tries to switch to the "runas" user.