How to apply default ppolicy with cn=config