One of the reasons I'd love to see a MirageOS port (or, rather, reimplementation) of little-t tor is, it wouldn't *need* any administrative access. It'd be a black box that speaks the cell protocol.