update cerebro auth policy