exclude all.policy its optional and not enabled by default