Allow sysadmin to set the default policy.