R1:1296c3d347c1

Fix two excessively aggressive policy checks

Summary:

- Some applications need public access regardless of policy configuration.
- The file data endpoint should ignore policies.