[dsmid]

I will do some tests to find out.

Here is the result:
defaultPolicies.json and keystore_mesquite.xml are both checked every time ACX is launched, i.e. no caching.
The good news is, they can be bind-mounted just before the first ACX usage (text selection in reader), even after the final target.