The active policy's marker for a value that must never cross a redaction boundary.
Replaces the active policy; the derived JSON field matcher is recomputed to match.