It’s probably because the SS will have to run under the -system- account.