@strings The reason kernel services, when you have true microkernel architecture, can have limited capabilities is because a true microkernel fully implements protected memory and runs kernel services in
"user space." This is what makes it
meaningful that they don't run as root.
root is still all-powerful.