Add "'localhostAccessOnly'" policy.