At the moment Drydock policies are all global. We should facilitate policies against blueprints, to allow individual blueprints to potentially have users lease against them via Arcanist.
The scenario here is that we want developers to be able to spin up an instance so they can run commands on it (or use the other interfaces).