We can now track changes to our permission sets and permission set groups and block changes that we don’t want by creating security policies
This will help to control which changes are being made to user assignments, like manage all data, view all data, reset user passwords, unlock users, and more.
Transaction Security Policy