This read-write TruthValue is the global default for dropping unsecured neighbor discovery messages (those without valid CGA/RSA Signature options), used when no policy explicitly sets rlNdInspectionPolicyDropUnsecured. An admin cares because it is the device-wide fallback that determines whether unsigned ND traffic is dropped anywhere a specific policy hasn't already decided the matter. For example, setting this to true(1) makes dropping unsecured ND messages the default posture across the switch, with individual policies free to relax it where needed.