safe copy of security policy, which gets deleted on mvn:clean