"Notify security agencies of any changes…"
Notify, but not seek approval? There's a simple answer to that.
Email after email sent every time any change is made to the network. The government asked for this level of detail, and this level of detail they shall get!
Any time a new TCP connection is established by a customer, causing changes in NAT tables in routers or changes to the cache content of proxies, they shall be notified.
I predict they'll get tired of it after an hour.
Biting the hand that feeds IT
