Is this really any collection? or just all systems / all users?Joe Gasper commented
Any collection. Be able to "lock" the members down against OSD, application, or package deployment. So when you've got this solid set of stable systems, you just want to patch and you want an added protection layer. BigFix has the concept of locked systems.