Step 3 – modifying the generated policy