- runs as non-root - does not require being in entropy/portage group - in fact, it's better (better isolation) to run as such - thus does not modify running system The wrapper script is ugly but very convenient.