it's obviously not practical for the apps to know the "core" policies