I am considering exposing
    NewXXXPolicy( params... )
only.

In this sense, we shouldn't export the route policy. I will make route policy private too.