This one doesn't seem correct to me. You renamed ``last_policy_reload`` to ``last_validated_at`` (in addition to moving it to the config), but this is not correct IMHO. The variable should be updated when you load the policy, not when you check whether to load it.

Also, this code is shared between all binaries, not just daemons, so it is semantically wrong to modify daemon data here. I think it would be more correct if we updated the timestamp in the daemons.