[Security-wg] On Policy Discussion & PDFs