So here it is. At this point you can do all kinds of fun things. If a user in any context of a tree has Supervisor rights to a single server, anyone with console access to that server can gain Admin Admin rights. Remote servers in remote offices are likely candidates for this. Attacker sets a Bindery Context to match another user with greater priviledges, such as Admin.
Attacker forces a bindery login to the server.
To defeat this, a sys admin needs to make sure there are no replicas with sensative accounts on remote servers.