It's never actually in a contract, these are always policies since employment is at-will. But "they cannot work" is implying that person gets fired. I agree th

It's never actually in a contract, these are always policies since employment is at-will. But "they cannot work" is implying that person gets fired. I agree that serious breaches of security are a firable offense, because it's plainly a fact that people get fired over them. Generally, though, developers are fairly hard to replace and anyone who is hard to replace is equivalently hard to fire. So most security policies have to work out some kind of compromise between those competing interests.