I think it is better and easier to test if the policy is deleted by getting all the policies from the API (not from the db).