add 'allow all' to TaskPolicy