zoneadm attach -u behaves differently when using rbac/pfexec

Hi all
On a Solaris 10 U10 system.

a) If I attach/upgrade my zone using root it results in a successful upgrade.

# zoneadm -z v0124 attach -u
Getting the list of files to remove
Removing 42 files
Remove 8 of 8 packages
Installing 744 files
Add 16 of 16 packages
Updating editable files
The file </var/sadm/system/logs/update_log> within the zone contains a log of the zone update.

b) The same zone but using my own user and pfexec

-bash-3.2$ id
uid=200(marcel) gid=1(other)
-bash-3.2$ profiles
Zone Management
Basic Solaris User
All

-bash-3.2$ pfexec /usr/sbin/zoneadm -z v0124 attach -u
Getting the list of files to remove