When a templating failure happens, we now simply ignore that path, rather than fail all access to all policies
* Initial work on templating * Add check for unbalanced closing in front * Add missing templated assignment * Add first cut of end-to-end test on templating. * Make template errors be 403s and finish up testing * Review feedback