I'm agree too, but i think that an explicit policy is better than full tool (ai) rejection...