validate presence of admin policy in collection; closes #903