Allow a KeyValueToken policy with no child Policy Element