I have to also suspect that this "hole" was intentional. I've not come across TC platforms in my entire life, so I'm hoping engineers who implemented this and left a plaintext file for policy configuration, did so on purpose. The config file can't be reloaded into the tcb module without developer mode, so at least that's a small hurdle :P