updated policy example, added control policy scopes