remctl is a client/server application that supports remote execution of specific commands, using Kerberos GSS-API for authentication and confidentiality. Which commands a given user can execute is controlled by a configuration file and ACL files and can be easily tightly limited, unlike with rsh. The mapping of command to backend program is done by the configuration file, which allows some additional flexibility compared to ssh command restrictions and works with Kerberos authentications rather than being limited to public key authentications.