fix policy to allow releng group to run Promote.