I think a default of `True` should be fine. When setting up new production clients with their own policy, that value is overriden by the policy (which will be `True`), so in that case the default doesn't matter anyway, and the person doing the setup will have to take care not to enable the client yet either way.

For local development without a policy (or the examplecontent profile) we actually want it to be `True`.

So `True` it is :+1: