[ "Stop when the policy cannot be loaded", "presence only", "never inspect, hash or measure", "Reject unexpected redirects", "not authority to administer accounts", "separately verified delegation", "Never persist" ]