Explicitly disable all security requirements during policy normalisation