I think multi-user in this context is more about authorization of operations. It&#x27;s correct that we don&#x27;t need users&#x2F;groups for this today, there are equally good things in cgroups and pam, but it&#x27;s a simpler abstraction in many cases.<p>I think your mostly correct, but in most cases I would prefer individual authorization rules, like apparmor. There&#x27;s always cases when you don&#x27;t want to escalate the entire app to root level, but need something more than what&#x27;s a normal mode.