Implement the default policy and profile registry, start on JSON-API