Added two more policies, not necessarily required for all users.

They both allow access to API-M functions to everyone including
anonymous users.