With Box Governance, currently there are 4 options on who is allowed to permanently delete trashed content: everyone, no one, admin, and admin/co-admins.
This new option "Policy Only (No user can delete content)" enables customers to pilot retention policies while keeping their trash setting to never auto delete, as some customers would not want to enable trash deletion before retention and legal hold are set in place.