Trustworthy Policies for Distributed Repositories