policy configuration GUI, still a couple bugs