I once updated an ACE for an ACL that was used for a PBR. It crashed the 4500-X VSS about 20 second later, brought down client access into our Data Center. Fun times!
I'm also not looking forward to anything DNA Center. I've played with it and it's so much hot garbage I can't even begin to describe how much I don't like the product already.
I can say with full confidence this is something you'll never actually need to worry about. Law enforcement isn't just going to grab laptops and pull keys. Plus, it's easier for them to grab the laptop while it's logged in anyways. 😐