So for every configurable option in the policy we should have a variable in def bundle? Why not set the option directly? ```def.ACL``` makes /some/ sense because it's being used for a bunch of options. ```def.trustkeysfrom``` is only used for ```trustkeyfrom``` option, so what's the point?