does that mean that it is impossible to achieve the goal with the Account Policy Plugin or
some other plugin? It could be that the plugin indeed is designed to achieve it but it
could not because of bugs, or it simply is not designed to do this.
Your idea means to go the other way round. We have to check if that way which requires a
higher configuration effort is acceptable.