Refactor admin policy to use expect