1. A method to be executed by a processor, comprising: intercepting, by a host computer, a host content change request indicating a change to a persistent object on the host computer; determining whether the change is authorized, as indicated by a set of change authorization policies; and allowing the change to take effect when the change is authorized; allowing the change to take effect when the change is not authorized for an initial period; logging information about the host content change request when the change is not authorized during the initial period; and blocking the change from taking effect when the change is not authorized after the initial period, wherein the set of change authorization policies is configurable to define whether the persistent object can be changed.