Adding security policy, now it works