A lot of our data is outside our main policy, especially json data. This snippet will help manage dirs that need syncing in a central place. Classes are global

central_ext_file_sync.cf

#this code has not been tested for minor bugs, but the idea is solid
vars:
  "sync_data" data => parsejson('{ "dir1":"class1", "dir2":"class2" }');
  "dirs" slist => getindices("sync_data");
  
files:
  "$(dirs)"
    create => "true",
    copy_from => secure_cp("/base/$(dirs)", "$(sys.policy_hub)"),
    if => "$(sync_data[dirs])";