root and sub policy now does not include the node itself, also added the policy >! which means not including any API call that could change the selector of this policy entry.