minimize use of root account

[Yudi V]

> Note that group operator also grants read access to disk devices.
> (The idea is that such users can run backups with dump(8).)
> This effectively means read access to any and all files on those
> disks, regardless of the filesystem permissions.
>

that's good to know, I am the only one using this server, so it is fine.
But just out of curiosity, how to give a user shutdown rights without
giving them read access to all the drives?
-- 
Kind regards,
Yudi