However, the machine level administrator can still tighten security, potentially breaking trusted applications that would otherwise have been allowed to run.