I read it as dealing with applications you only get shell access to and can't forward ports.