Set default policy to allow