Draft privilege escalation policy for comments