You'll notice
Over a remote connection, a setting owned by a trusted policy now says so instead of reporting a generic save failure.
Settings save-failure messages sent over a remote/bridge connection now distinguish a setting locked by a trusted policy from a generic save failure, showing "Couldn't save this setting: a trusted policy owns it (detail withheld on this connection)" instead of the generic message.