#3950 added extra policy config to allow core JMX features to work