Compliance training and policies alone aren’t enough to curb this insidious misuse of power in the workplace.