An instance is initialized for each policy request.
The caller must ensure that the same instance is not destroyed more than once.
