Comment 3 for bug 1299201

Of course the reason why the insecure policy works is that it has this:

    <defaults>
      <allow_any>yes</allow_any>
      <allow_inactive>yes</allow_inactive>
      <allow_active>yes</allow_active>
    </defaults>