Similar to the Full Disk Encryption configuration option "Enable encryption lockdown", it should be possible to configure Security Policies to stay always persistent once applied to ensure basic company policies are always fulfilled, like always disabling…