Add policies to api.