keep the default policy file synced