fixes signature race condition

This prevents policy from being created twice with different timestamps thereby preventing "signature does not match" AWS errors.