addition to policy.conf