Ok if file permissions are set properly I don't see how it would be a risk. The script runs as root and makes it's config changes for n-app and\or then passes start\stop\restart instructions to n-app and then closes. Or am I over simplifying it?