Adding cdn to security policy