Exists a range of system stored procedures that can be used as a critical breach, for example, try xp_cmdshell 'dir *.exe'. So need to have some explicit range of SP that can be executed.