Implement policy as a SecurityManager