// policy file that does not grant any permissions
grant {
};