can't delete ppolicy overlay from cn=config