Right, the only problem with that is this spec works on all 4 currently supported platforms. If we build it out-of-band then it only needs to "live" in one place. Otherwise, all the policy-related files will have to get copied to 4 different directories which will make maintenance of this repo even more difficult.