fix policy.insertOnly