core/expression: all the function calls pass through a single function now.

That's where policies will be applied.