Add documentation about origin policy.