tomd: ensure there is always some reason given for failure on policy