How do I keep all permissions in the parent node's rep:policy?

Hi Everyone,

Is there a way to store all permissions for /content// subfolders in /content/rep:policy, not in the rep:policy nodes of those subfolders?

When I set a permission for some group to, say, /content/abcd, it will appear in /content/abcd/rep:policy. However, I have just seen a structure where /content/rep:policy contains a lot of allowXXX and denyYYY nodes where the exact path is specified in rep:glob property, and there are no rep:policy-ies in the child folders. How can I configure AEM to write settings the same way?

Is it possible at all, maybe that is done only by creating a package with the permissions in some external program and then installing the package?