Adding policies for firewall API operations