SimplePolicy: filter nested objects, fixes #2582
SimplePolicy now recursively checks activities for an object
map, all of which must have a passing domain to pass.
SimplePolicy now recursively checks activities for an object
map, all of which must have a passing domain to pass.