Description:
Requesting a policy that will allow an admin to fully block all popups but allow users to individually make exceptions for one-off sites but continue to prevent them from turning off blocking popups for all sites. 

Use case/Motivation:
Due to security compliance reasons - a policy must be in place to disable all-popups. Currently using the "DefaultPopupsSetting" policy plus whitelisting popups.  It is acceptable for users to make exceptions for popups but it is not acceptable for them to switch the blocking for all popups within the chrome://settings/content/popups site --- in other words the desire is to keep it blocked by admin. 
Currently it is cumbersome to manage one-off requests for admins to whitelist popups at scale and this hinders deployment more broadly of Chrome. And the preference is to maintain the whitelist for enterprise-wide exceptions. 

Existing workarounds:
None.   While it is possible to disable the DefaultPopupsSettings and allow for users to allow exceptions, the possibility that a user can allow all popups goes against corporate security policy.