If you have AD, do you still need governance?