slapo-ppolicy container question