opensh doesnt ask any passwords and can be used in scripts more easily and gives all capabilities vs andriane asks passwords and and session is valid only for some time. Harder to put into scripts, but is considered more secure because you need to enter a password before it gives you the capas. Both ways gives you full capas, but its just alternative ways how people prefer to gain full privileges.