Path to security.policy more configurable