NOTE: telling people to turn on context-aware access without telling them what conditions to add does literally nothing.
So "if necessary" doesn't make sense. It's necessary.
Also we don't want just MAY controls...
Or maybe just cut 2.2, make it a note under 2.1.
And add more details to 2.1 about making custom access levels
Policy Re-evaluation post 0.2 release
NOTE: telling people to turn on context-aware access without telling them what conditions to add does literally nothing. So "if necessary" doesn't make sense. It's necessary. Also we don't want just MAY controls... Or maybe just cut 2.2, make it a note under 2.1. And add more details to 2.1 about making custom access levels