Note: we should fetch `policy_module` and use it as `PolicyMode:fetch_bucket_policy/2` and so is `response_module` ... and that'd be another issue to refactor.