Describe a time when you had to enforce a security policy that was highly unpopular with the end-users. How did you handle it?
