Implement a reference monitor for organization-defined access control policies that is always invoked.