Add how to set exec policy for certain user