>Maybe this would be clearer with a distinction between local and remote
access. Users with physical access to the power cord may as well be able to reboot the machine. Remote users do not have this ability.
Thank guys,
This makes perfect sense. I was indeed logged in via the console AND
by ssh from another machine, which is how the ssh got its permission.
Excellent default, thank you.
Bill