There's an issue where if sync fails the plugin policy isn't removed/deactivated from the plugin_policies table on verifier.
The sync job should take this into account.
Furthermore the validatePolicy function on the verifier should call the validate policy equivalent function on the policy side