Ler user configure full cross-domain policy (or even multiple ones)