[Patch] Add a policy spec so that only package owners can tag builds