Save policies

* Always save on creation
* Optionally save on change
* Optionally save after requests even if session unchanged