Policy snippets for cfengine 3.x