For some reason I doubt that this runs all the way down to the UNIX level of things. It's probably just the restriction to only run signed .app bundles, and maybe signed installer packages. I guess we'll have to wait and see.