Shouldn't the cooldown be enforced only if the policy was executed a second time after the update.