policy_module(permissivedomains,23) optional_policy(` gen_require(` type pdns_t; ') permissive pdns_t; ')