features: policyExceptions: enabled: false