add network policy document