add priv policy