make token-aware policy use local replicas only