move uri policy to own document