Policy
Agent access policies — allowed/denied actions and spending limits.