This should be replaced with an actual policy file