I have inherited a BDC and PDC. Both have policies in place but the policies are using different templates. Which policy overrides the other, the one on the PDC or the BDC? Or do they get both? Or does it depend on which box they authenticate against?