security policy fix