1. A computer-implemented method comprising: using one or more processors to perform operations of: monitoring one or more operations that override a restriction in a security configuration scheme, the security configuration scheme being stored at a computer system; and automatically updating the security configuration scheme based on the one or more monitored operations.