setpolicyflags to allow images