g10: If the set of UTKs changes, invalidate any changed policies.