permit output git_repo and verisign. deny output policy