This introduces a function that compares two string policy sets while ignoring the presence of "default" (since it's added by core, not the backend), and ensuring that ordering and/or duplication are not failure conditions. Fixes #1256
