I mentioned this to a coworker, and he said that it may require granting X privs to "winuser" as it would be starting the apps while "ct" owns the display. I hadn't thought of that aspect.