Security policy used for testing.