Let's put it inside SecurityPolicy class