I don't think you are understanding my point. Nobody gives a damn what the Mail Administrator thinks. The auditors see "BES" and move to the next item, they see your custom made solution and go "WTF is that? Not in the manual == Security Risk!!!11"