This security policy aims to provide industry standard security tools and guidelines. Since security and usability are often at odds with eachother, this standard will work in a balance. It does allow for tighter security at the discression of the implementors but doing less then the standard is considered non-compliance of the standard.