for virtual liver, the default policy for a project should be private_policy to avoid validation errors