/POLICY[=policy]
        /[NO]POLICY

        Specifies the policy for the modified principal.  If the negated
        for of this qualifier is used then the modified principal will
        have any associated policy removed.