Follow-up to I28c31fc4ea. Also improves what policy values are considered disabled, documents how to extend core checks/flags and adds a structure test for it. Bug: T118774 Change-Id: I66bf396e8e8a8c310a47ba337abe9070e7e83ff6