I've done more reading. Is the problem. That people may be choosing to run with reduced trust to verify that their code works in such an environment?

Also, I'm increasingly convinced that we will have a problem.
The things you teach me! At the Day Job, I never once thought about the trust levels.