make the ntp conf an optional policy