Not all policy enforcement needs to be automated

Automatic enforcement of policy is great when it's possible. When it's not, it's often to your benefit to adopt the policy anyway.