policy: always accept assoc requests by default