cmake: policies must be protected by if()

... unless they shall break older cmake versions which don't know
about them. this seems to be a bit superfluous to me, but whatever...