Revert the initial test on whether the policy is in force so that, if
there are no restrictions, the function bails out early, allowing to
de-indent the rest of the code and have it finish with a non-zero (deny)
'return'.
No functional change (intended).
Sponsored by: The FreeBSD Foundation