Plus system prompt and context control. Also I'm beginning to see them kind of like linux namespaces or container, ie anyone can make one but it's going to have only as much authorisation as the starting process, or even less.