Nonetheless, I just realized that perhaps we should at least log the userid for whom the policy could not be established. That would be more clear in terms of future audits and maintenance.