begin adding sepolicy, probably needs editing