Hmm.. I don't think it would be that difficult to create a kixtart script that parsed policy files. It also wouldn't be too difficult to test permissions. Would this be something worth doing?
(No, it wouldn't be on the level of GPO, but it might be useful in many cases.)

Brian