Current behaviour interprets them as CSV, converting them to multivalued arguments.

There should be a way to escape the , and skip the CSV conversion. For example:

policies:
  materials:
    - ref: my-policy
      with:
        foo: bar\, baz