The conf/server.policy file needs to be removed as its unused and give users the impression that security policy statements added to it affect the server.