See `toCoreEntitySpec` calling `convertFlagsToKeys`. Do we need/want a similar thing for policies?