Sorry for my ramblings here ... just dawned on me - thats why Microsoft built-in the /ENV switch to runas ... so that the CALLERS environment block is substituted into the CALLEES environment block ...