policies/tool/filesystem-restrictions.yaml