add cfx sepolicy just for try