actually apply trust-policy, update specs
create a SecurityError that isn't a build issue
apply security policy when installing on RG2.0