"policy is obtained from a central repository such as a directory," . . . .