policy: only trigger roam-sm after client becomes roamable