The rules in the policy.release.attestation_task_bundle policy.release.trusted_task overlap, e.g. attestation_task_bundle.task_ref_bundles_pinned and trusted_task.pinned; attestation_task_bundle.task_ref_bundles_current and trusted_task.current` are nigh identical. It would make sense to de-duplicate them.