I use this policy https://github.com/pjv/strfry_personal_docker/blob/main/write-policy.py