One of the issues with the AllowHoldPolicyOverride system preference is that it does not have a corresponding user permission, so once the system preference is enabled any user who can place a hold can override hold policies. By comparison, the various overrides related to checkouts require a system preference to be enabled and for the user to have the force_checkout permission.