1. A method, comprising: intercepting a host content change request indicating a change to a persistent object on a host; determining whether the change is authorized, as indicated by a set of change authorization policies; allowing the change to take effect when the change is authorized; blocking the change from taking effect when the change is not authorized; indicating whether the change was a “create”, “delete”, “rename”, “move” or “write” operation, or whether the change set or modified an attribute of the persistent object; indicating a time at which the change occurred; indicating one or more attributes of the changed object after the change takes effect; indicating information about which end user initiated the change; and indicating a set of one or more differences for one or more changed portions of the object after the change, wherein each policy in the set of change authorization policies is in the group comprising: policies indicating a set of persistent objects that can be changed without restriction; policies indicating a set of users, programs or entities that can make changes to a specified set of persistent objects at any time; and policies indicating a set of users, programs or entities that can make changes to a specified set of files or directories during one or more specified time windows.