What does the PolicyKey actually do?