This read-write RlIpv6FhsSettingStatusType object in the ND inspection policy table enables or disables dropping of "unsecured" neighbor discovery messages -- those without valid CGA and RSA Signature options. An admin cares because turning this on is what actually makes ND inspection enforce cryptographic protection of neighbor discovery, rather than merely inspecting and passing everything through. For example, enabling this on policy "ndi-access" means any Neighbor Solicitation/Advertisement lacking a valid signature on ports using that policy will be dropped instead of forwarded.