Use secure policy

Fix some issues: #4326, #4374.
Prevent security problems using a minimum privilege policy.