Allow empty policy for no server-side. Closes #80