checksum policy ignored?