Plone policy rules for ROAP KSP