From a security point of view, this is no more scary than allowing admin users to install a new kernel or glibc package.