doc how others say you should set up a RO policy