allow_unsigned was incorrectly set in updatePolicy()