Side rant: when root isn't.
We use security software at work which loads kernel modules that can circumvent root's total control. It pisses us off to no end, to the point that we just default to blaming it when something won't work and very weirdly. It's company policy due to federal regulations that we use it though. I'll still never understand why we install antivirus software on a Linux system located in a DMZ.
Because, up until about a year ago, treasury.gov still had an old 1990s era point and click onscreen keyboard to enter your password into the system used to buy bonds. I believe they still do the "Is this your image?" bullshit - and the image never changes.
I work in electricity. All of our software, or rather the software running on any one of our several thousand Linux servers, is currently developed. They run grid monitoring, distribution, and optimization.
My point was more the government is so far behind the times, computer-knowhow-wise, that trying to make sense out of governmental IT requirements is a good way to drive you insane.