Gate external ingest on policy on token

This allows enterprises to opt out of external ingest