1. Custom policies in rego replace backed-in ones, we need to have ways to keep both 2. maybe related: allow to add json to policies dir (it should be translated to `data`)
data)