semgrep definitely doesn't like quotes around the policy...

1 job for main in 47 seconds (queued for 7 seconds)