Alternate solution is to move dev to machine without email /web direct access and be more lenient in policy. For instance in a dedicated vm if hw allows for it.