One embodiment of the present invention provides a system for executing a command on a computer system. During operation, the system receives a signed command from a first quorum member at a security manager, wherein one or more quorum members must accept the command before the command is executed. Along with the command is data indicating which additional quorum members will be participating in a session, and which quorum persona they wish to invoke for the session. After verifying the signature, the system sends the command to a second quorum member, wherein the command is verified, or authenticated as originating from the first quorum member. Next, the system receives a signed response from the second quorum member, wherein the response indicates whether the second quorum member accepts or rejects the command. If the second quorum member accepts the command, the system sends the command to a native client which executes the command.