They last part is impossible to enforce really without forcing audits on everything.