[nequo]

> the developer who should know the application better than the systems administrator

On the other hand, the administrator knows their system better than the developer. There could be certain network connections or file paths that you want to block on one system but not on another.