o Include the enabled policy in the log output (just saying "can't resolve X from Y when Y actually contains X is rather confusing...)