don't use device sepolicy for now (start clean)