Fixes #4288: use local copy for updating ncf on policy server