policies/tool/pi-filesystem-restrictions.yaml