LoLT policy in reality