policy.h: Don't allow `user' actions in user policy files.