set unrestricted policy so profiles can import