pub fn parse_command_policy_value( value: Option<&VmValue>, label: &str, ) -> Result<Option<CommandPolicy>, VmError>