Discussion: modularisation in policies

Follows up from a discussion !145387 (comment 1850238696) on Add mutation APIs for group-agent authorizatio... (!145387 - merged)