In IIS 7, what is best practice? Should I create an application pool for each application, or should I share an application pool with as much application as possible?

Are there any performance drawbacks or security issues related to one of the options?