Which of the following statements about trusted processes is false?

a. Only trusted personnel, such as security administrators, should be authorized to use them

b. They are not bound by all the security rules implemented within the kernel

c. They are used to tailor a security policy to the specific needs of an organization

d. They are needed only if a security kernel implements a discretionary access control policy