Lets track CMs external sepolicy