Your company has two Google Cloud projects and you want them to share policies. What is the least error-prone way to set this up?