CFEngine: The agent is in 27 - CFEngine Q&A: Policy questions