(remove this config as well)

Let's just have the default policy be keep-all.