Policy should be considered broader a restriction than it currently is. For example, we shouldn't check if hosts are available in the first place if Tether is disallowed by the policy.

See here: https://cs.chromium.org/chromium/src/chrome/browser/chromeos/tether/tether_service.cc?q=tether_service&sq=package:chromium&l=545