Best practices: WE ARE ALL HUMAN (I hope) If you are looking for the best case, you'd want to cover your own incompetence. Honestly, I work from this rule. I policy block everything that I haven't allowed explicitly, simply becausd if you try to build it in reverse, you're almost guaranteed to miss a lot of important blocks / etc..