Rename TW.SQL-INJECTION-ONLY.policy to TW.SQL-INJECTION.policy