(Which is all to say that I suspect building a function by hand that uses a map of a map of claims to MetadataPolicy objects "works" but may not be at all trivial to do in the configuration, thus the assumption that overrides can be used to handle that use case, despite the problems they cause.) -- Scott