Add sync checkpoint master pub key and strict policy