The Rumpole policy requires the user to resubmit a request for break$-$the$-$glass access if the policy decision point returns a new set of obligations that the subject must accept. Why does the policy decision point simply check the obligations and, if they are a subset of the obligations in the request, grant the request?