Reply to Message

I do, you probably do, grandma won't give a crap.

So the answer is....

Why does grandma have to su at all?
If having to switch roles is the problem, why not implement privilege separation, and then set it up so all grandma's tasks can be done at the level she's comfortable with?

Inconvenience isn't good security, it's bad design....