policy: avoid creating kick loop for client