Ref T603. Do a little more sanity checking on custom policies, so policies like this:

[ Allow ] [ Users ] [ <no users> ]

...that don't specify anything and thus which aren't meaningful raise errors.

{F69570}