Rename sys.update and sys.failsafe: add _policy_path