policy checking while rerendering; globals for policies