On the other hand, if you establish basic norms, you shouldn't have issues like "X won't let me cheat on my expense report" or "Y won't let be a literal agent of foreign power" regardless of the size of the organization.