The `ProjectPolicy` is meant to be declarative in nature, and it isn't
necessarily a good idea to remove all duplication here. That level of
indirection would _hurt_ readability, rather than improve it.