a TTL > 0 is required in the policy constructor when the type is TOKEN,

but may be left out for the other types