Optional. The etag for the policy binding. If this is provided on update, it must match the server's etag.