adding backup/restore policy permissions
never leave the vpn in a broken state