I work at a Managed Service Provider for IT and we have a ton of GPO policies that are labeled “VIP”, which is internally understood as ‘there’s no reason for this policy to exist except that someone in power demanded we create it’. Many of those policies are dialed down to a single or small handful of people.