The problem is that as soon as the hpcc user is allowed to modify classes I think you have a security issue. Effectively means people running ECL jobs can modify the deployed platform, which doesn't feel like a good idea.