policy env now stores a map of labels to policies