apply default deny own policy