I support this, but a policy that was never invoked cannot be strict - you will find out when it actually gets tested. I also have a policy that i will never p

I support this, but a policy that was never invoked cannot be strict - you will find out when it actually gets tested. I also have a policy that i will never pay ransom, but 8f it happens, will I?