Comment by progval

It makes sense if you don't want a remote code execution in one of your app to provide a full root shell.