Make recovery sepolicy permissive