I almost wish my org knew enough to make such policies.