forbid altering `column_policy` on a single partition