Anon….
Some anons can be trusted with root.
Some anons can't be trusted with root and have to make do with sudo instead.
Some anons can't even be trusted with sudo, and have to be locked down with strict sudo rules.
Finally, some anons need selinux turned on as well to keep them from doing things as bad as accidentally drinking windex.
Actually half of them are shills who only bake in order to inject their own shit into the notables, and they won't necessarily collect unless they need to slide the notables.