Track external/sepolicy from CM