This is valid and has a specific meaning. But what is the meaning?
In order to make this tractable, the implementation considers plugin types as being either 'PolicyRules' or 'Matchers'. PolicyRules can be expected to give a "yes/no" answer and are usually used within a
<PolicyRequirementRule>. Matchers usually return sets of values when applied to an attribute and are usually used within an