two questions about su(1)

first, why is the -c check not applied until after a password is collected?

> ➜  ~ su -c zsh
> Password:
> su: only root may use -c

second, what exactly do we think this -c restriction is buying us?

> ➜  ~ su
> Password:
> root@util:/home/vixie # exec zsh
> util#

-- 
Paul Vixie