Actually, this tiny piece of code is not functional for a reason I can't fathom
I asked the cfengine mailing list for more clue ( https://groups.google.com/forum/#!topic/help-cfengine/MVxnLXbdNkI )