The UNIVERSAL POLICY includes the following: only the administrator for a
product, or an actor designated by the admin, can access and modify security
features of the product.
The product provides a security feature (such as authentication or