They allow you to execute code on the server that can control exactly who can write and what can be written to a GameINI. They work just like normal scripts, but have a limited set of supported functions available. If the script returns false, access is denied. If the script returns true or crashes, access is allowed.
If you could be more specific about what you're confused about, I might be able to give a more useful explanation.