🎨 Design: Allow users to define exceptions to enforced security policies

This issue is to design for the requirements on the parent epic.