comment to hint at how to attach policy to multple endpoints