Library example: split SAM policy attachment into two attachments