More debug logs for hsm_key_factory_generate_policy()
Free policy a bit later in zone add (DOH)