Systems can optionally be configured to use the access policy from this pool.

<% if (!readonly) { %>
<% } %>