Add security manager policy for testing