I'm planning on changing the draft to clarify what is meant by WMF directing an action, as follows:
- Gerrit group access for a WMF employee may be revoked at the direction of that employee's manager.
- The CTO may direct granting or revocation of any group from any person.
- The CTO may direct alteration of the policy.