remove unknowns from sepolicy