New packaging policy: privilege escalation policy