Only admins can create new policies
By default, every tenancy is provided with two policies for external secret operator mount