policy daemon


all instances use a small custom enqueuer written in C
talks to the policy daemon before enqueueing (or not)

basic concept: refuse acceptance or deliver, no silent dropping
silent drop only possible if explicitely enabled for target user
actually a legal requirement for service providers
but many do it wrong