Add security-manager policy for user types