What would you do if a client requested a system configuration that goes against industry best practices?