security: In ConfigPolicyManager, need to make the base class public.