Merge changes I9fcca11e,I3637559d into main

* changes:
  Don't enforce policies that has the flag turned off
  Add bundle policy size verifier