Once the import keys feature is complete in the enforcer, then it will be possible to import keys for a zone which do not obey the zone policy. There must be a way for the auditor to ignore those keys when auditing the zone.
Once the import keys feature is complete in the enforcer, then it will be possible to import keys for a zone which do not obey the zone policy. There must be a way for the auditor to ignore those keys when auditing the zone.