I don't get your reasoning. How does access to an OS console imply superuser access to the application's auth?