use CM's sepolicy