It is the same as qubes.VMShell - the actual difference is in qrexec policy, which contains 'user=root' option. QubesOS/qubes-issues#2572
Marek Marczykowski-Górecki