don't allow lower case built-in policy names