I've been using my own if up/down scripts package for quite a long time now. UID::user is enough for executing the script. It might also need CAP::net_admin, if it does certain things with network interfaces. Correct digsigsums must be calculated too. I would suggest you to do your own scripts package. I might release my scripts package one day, but I haven't got any schedule for the release.