https://www.petervanderwoude.nl/post/using-policy-sets-to-group-objects/