“Attack the policy, not the person.”