policy blocks in script files