PolicyAction:
| "ssh.open"
| "proc.exec"
| "proc.sudo"
| "fs.read"
| "fs.stat"
| "fs.list"
| "fs.write"
| "fs.remove"
| "fs.mkdir"
| "fs.rename"
| "ensure.package"
| "ensure.service"
| "ensure.lines"
| "patch.apply"
| "transfer.upload"
| "transfer.download"
| "transfer.local.read"
| "transfer.local.write"
| "transfer.local.create"
| "transfer.local.overwrite"
| "tunnel.local"
| "tunnel.remote"