We created the policy, so we don’t need to use it: a qualitative case study of consent policy implementation