That would be the logical conclusion, but it seems Apple wants to have the check in the kernel rather than in userspace...