This check should only happen in policy_check()