@mmodell before I dive into this, can you think of a reason that it is a horrible idea? I've poked about a bit on the WMF Phabricator instance and I think that the details of a custom policy aren't really a secret. They may be a bit hidden in some parts of the UI, but I can't find an example of one that is completely opaque.

Maybe we can report it upstream, because it causes a problem for bots. But I'm not sure, how fast the would handle that request. Otherwise, we can write it on our own, and upload the patch upstream, if they thing that they want have that too.

(Opps, I didn't see that the task is already assigned ;))

@bd808 I don't think it's a terrible idea. In general we want policies to be transparent as long as they are enforced. Security through obscurity isn't security, etc.

:)