It's not the broadest permissions from the parent, but the promises at the time of the fork, for example you can setup the parent in such a way that you fork of

It's not the broadest permissions from the parent, but the promises at the time of the fork, for example you can setup the parent in such a way that you fork off early a unprivileged (or privileged) child that has a different set of promises from the parent.