some re-org wrt how printing pass/warn/fail works
test failing policy 2.23.140.1.2.2