[Issue 9280] New: A read-only ppolicy installation