SecurityContext should be injected on policies
updated composer.json
cs + doc fixes