[marcosdumay]

They had to allow the same kind of access they have on their own "security" software.

Nothing in that means they need ring-0 access.