Would it also make sense to check that these policy IDs were all different, and that it's not the same policy over and over (since we do not de-dupe policies)