Does POLICY include the definitions of what the PROPERTIES are as well as which
PROPERTIES are allowed, or is it only which PROPERTIES are allowed?
This is an instantiation of a general case where you have identifiers to
references to resources instead of identifiers to resources directly.