configuring ppolicy overlay using cn=config