added generic extra policy, * for wildcard to match all outgoing network requests, and ditched the first line domain requirement for policies.