With the addition of Universal Click to Play on ASK (by default) we want to provide a way for Enterprise Admins to disable this behavior.

There are a couple of different options:

1.) Add a completely new option to DefaultPluginSetting (4 = ASK - Click to Play), it should not get automatically enabled if they set the current (3 = ASK + Click to Play).
2.) Add a completely new policy

I'm generally more strongly in favor of #2, since we are doing a settings simplification this year and it seems less confusing.  In either case, whatever solution we pick, we want admins to explicitly have to apply policy to turn off click to play (i.e. to offer a warning that we are deprecating Flash Player).