5
I can't tell
I just think it is a great idea.
Then You can have a real Webmaster-group and a Admin-group.
In fact, that is normal/regulations in companies.
Newer use You master-user account for daily use
All-right I work with security at my ordinary job, and don't uses HTTPS on XOOPS.
If someone hack my computer/internet-line, steel my laptop or something like that, they get my userid/password for webmaster-access on a couple of sites.
Special after the "remember Me" function is add.
Therefore I use a smaller account for daily use and only the webmaster account when needed.
That give some extra work with permissions, but I think it's worth it.
"I am too afraid to be paranoid"