1. How is a creation policy specified?