I dont believe DOTARS have the final say on this particular issue. It is up to the AIP (Aviation Industry Participant) to make a determination and include in their TSP (Transport Security Programme)
Most operators have the same policy but I dont think you will find a specific ruling in the ATSR regs.