ppolicy and simpleSecurityObject exemptions