Towards supporting users in assessing the risk in privilege elevation