I vote to have a web.config setting to force ON or force OFF, but also have the per-session setting as it is today.