Is that the only thing governing unprivileged ports, or do programs also implement their own rules?