By default, OpenShift code runs in the global root context.  There's no rigid separation between system changes that are made by ruby directly and system changes that are made by oo-spawn.

Having a call into the container as root, and a call into the container as the gear user make sense.  But that does not cover the uses of oo-spawn which are intended to run completely outside the container as root.