It would be great to add a check constraint on the table that checks 'policy_id == NULL OR bound' to make sure we never claim a node is not bound when it has a policy