Policy update: server side implementation