#3950 created security policy