>What policy setting do most of you folks use, and why?

There's no single setting that's best for all sites.  The setting that's
best for you has to be determined according to the dynamism and types
of the files in your environment, coupled with usage patterns (as in,
if it will be updated occasionally by someone logging in, then go ahead
and retry).  The drama of configuration.
   Richard Sims, BU