Give contextual policies a try that rely on parent/child relationship through the entire stack. #netFool