TRPOLICY_ALLOW_PER_PRINCIPAL
c->trpolicy = TRPOLICY_ALLOW_PER_PRINCIPAL;
(config->trpolicy == TRPOLICY_ALLOW_PER_PRINCIPAL)