Add a cacert policy