They are just like every IT worker in a large non-software industry: instructed by their boss that more important employees than you are currently unable to do their jobs because of your security restrictions, so remove them or be fired.