Things that people think are useful are possibly going to happen even if you forbid them. If you forbid people from logging onto production hosts, and they truly think they’ll need it for emergency situations, they’ll make sure there’s still a way for it to happen, albeit under a different name.

…

The most basic point here is that you can’t expect to change the outcome of these small little decisions that accumulate all the time if you never address the pressures within the system that foster them.