It is the default policy applied to users (non-admins). I think I'm just going to remove it for now though since it's defaulting to Off.