get_policy seems to mess a lot with the formatting of the and adds a data layer so all policy entries are under policy.data['appcontrol'] etc which means any policy manipulation cant be uploaded using update policy. Seems to be llinked to the APIResponse format.
had to revert to an old version of cyapi to get script to turn appcontrol change window on and off.