See D10131 -- I'll do this when I have some downtime. Good things to cover:
- Special behaviors around files.
- Using `bin/policy` and `bin/policy unlock` in particular.
- Click the header to show policy details.
- Setting application-level policies in Applications > Help/Options.