When RunAs is enabled for a Windows PowerShell session configuration, the Windows security model will not enforce a security ...

When RunAs is enabled for a Windows PowerShell session configuration, the Windows security model will not enforce a security boundary between sessions of different users that are created through this endpoint.  Ensure that the Windows PowerShell runspace configuration is restricted to only the necessary set of cmdlets and capabilities.