I work in the FDA, and it almost takes an act of congress to get root on developer workstations. Also we can't install software unless it's on the the MAT (master approved technologies) list. Which is pretty ironic, because we create software ourselves, which is of course not on that centrally maintained, slow to change list. So we're not sure if we're actually allowed to ever run the results of our compiles. Nobody wants to ask because we might not like the answer...