A Pod sets runAsNonRoot: true. What is the intended effect?

1. Encrypt all application data automatically
2. Grant the process all Linux capabilities
3. Require execution as a non-root user
4. Make hostPath mounts universally safe