Currently, the enterprise policy system allows administrators to broadly turn on or off the password manager for chrome users.

Some enterprises may have a policy that disallows users from saving passwords for some sites (like internal or other sensitive sites).

Right now, the only way to enforce this policy is by turning off the password manager completely.

Chrome should have a mechanism by which enterprise admins can add sites to the "Never Saved" list, so that the password manager can still be used for sites not covered by policy.