Added XACML policy for denying access to streams with ID of "STREAM"