There can be use cases where the policies may be stored at locations only the locators will know, in which the policies/policySets do not make any sense. It is important to just allow the Locators in the config file.