Attack the policy, not the person