HTCondor prior to 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
wisc htcondor