Bank of America was like that. One former colleague wanted shell logins on a windows box, but was denied permission to install cygwin sshd. So he wrote his own version that listened to a port and executed the unauthenticated command sent to that port. And that was 100% within policy.