Introduce new policymaker tag, and updates to web UI to support that (which involves rewriting half the menu code since it didn't really deal with anything other than admin vs non-admin).
Write a test, and fix bugs thus found. Also let's regularise semantics, and not let admins create policies for vhosts they haven't got permissions for. That makes policies a bit more like exchanges and queues.
Test params as well, try to be a bit more abstract, fix another bug.
Merged bug25778 into default