[ops] need help configuring glance policies