Usually admin policy escapes are not qualified for the bug bounty program, as far as I know.
Having said that, we would really appreciate receiving a bug report if you find some way to escape from the admin policy (including corrupting a force-installed extension).

mnissler@: Do you maybe have anything to add/correct here?