Maybe it is just me being paranoid but `deepcopy` might be safer. The code after this need not worry what it is doing with `_policies_in_group`.