Track CM external/sepolicy