[PCI DSS 1.x] 12.3.1 Explicit management approval

12.3.1 Verify that the usage policies require explicit management approval to use the devices