install policy only on custom end points