allow_policies with nested types