improved jndi name policy