passcode

 OK - so we downloaded the app to our son's ipod touch, set the passcode, and set the restrictions.  All is great.  Now, after he turns off the itouch and wants to get back on it asks him for his passcode.  WHAT!!!! why have a passcode to protect the restrictions and turn off the safari browser if he has to have the passcode just to use the thing in the firstplace, thus giving him the power to do an endrun on the protection when we aren't around, or requiring us to be around for him to use the itouch!!!   Help! Am I missing something?