fix bypass policy