Whoops, need not apply policy if specific IP address specified. Will fix.