moved default policies to the bottom of script