security policy for the scripting bridge