See D10131 -- I'll do this when I have some downtime. Good things to cover:
- Special behaviors around files.
- Using bin/policy and bin/policy unlock in particular.
- Click the header to show policy details.
- Setting application-level policies in Applications > Help/Options.