diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9e267c3..9770c2c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -62,6 +62,7 @@ jobs:
         run: |
           set -e;
           npm install --omit=dev;
+          NODE_OPTIONS='--experimental-policy=./policy.json' \
           ./index.js > output.log 2>&1 & APP_PID="$!";
 
           while ! grep 'Available at' < output.log > /dev/null 2>&1; do
diff --git a/scripts/e2e.sh b/scripts/e2e.sh
index aa0afc8..fa0605b 100755
--- a/scripts/e2e.sh
+++ b/scripts/e2e.sh
@@ -34,11 +34,11 @@ if [[ -z "$TARGET_HOST" ]]; then
   export $("$BASEDIR/scripts/random-secrets.js" | tee /dev/stderr | xargs);
 
   # TODO replace express with something else to be able to add --disallow-code-generation-from-strings
+  # TODO once https://github.com/nodejs/node/issues/50452 is resolved, add NODE_OPTIONS='--experimental-policy="'"$BUILDDIR/policy.json"'"'
   PORT="$PORT" \
   MOCK_SSO_PORT="$MOCK_SSO_PORT" \
   SERVER_BIND_ADDRESS="localhost" \
   DB_URL="memory://refacto?simulatedLatency=50" \
-  NODE_OPTIONS='--experimental-policy="'"$BUILDDIR/policy.json"'"' \
   node \
     --disable-proto throw \
     "$BUILDDIR/index.js" \