update pundit policy for /service