After a site has been somewhat dialed in and policies have been set for everything, there ought to be a setting that when turned on, the admin will have to state a reason for turning switches on or off in a policy, or changing an enabler. Similar to how windows server makes you give a reason to restart the computer. Even an admin working by himself forgets why a thing was done. And often policy and rule changes get done on a whim, only to find later that something else was broken in the process. Better auditing would be, better.