Unclear crypto policy is bad policy