Adopted authority vs profile switching

At one time IBM decided that using adopted authority should not work in 
certain situations, like creating certain group profiles, etc.  Perhaps 
they thought this was a security enhancement.
Then they allowed a workaround with profile switching.

So then, does this not allowing adopted authority in these situations now 
go into the realm of 'security by obscurity' and should they just open 
these up to adopted authority?  Or do you see a value into making people 
use these api's to do profile switching, - in this situation - ?

Now, I am not arguing that profile switching may not be useful in some 
client serving or web based applications.  I am just arguing about it in 
the first situations.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com