A user can place a JSON file in /etc/fwupd/bios-settings.d/ with the default desired policy for the machine. fwupd will load this policy on startup to ensure BIOS settings are set as desired by the system administrator.