spec: https://wicg.github.io/document-policy/