Our RHPAM doc mentions

https://access.redhat.com/documentation/en-us/red_hat_process_automation_manager/7.3/html/installing_and_configuring_red_hat_process_automation_manager_on_red_hat_jboss_eap_7.2/assembly_installing-on-eap-deployable#eap_execution_server_download_install_proc

https://access.redhat.com/documentation/en-us/red_hat_process_automation_manager/7.3/html/installing_and_configuring_red_hat_process_automation_manager_in_a_red_hat_jboss_eap_clustered_environment/clustering-ps-con#clustering-ps-configure-standalone_clustering-runtime-standalone

Copy the contents of the TEMP_DIR/rhpam-7.3.0-kie-server-ee8/rhpam-7.3.0-kie-server-ee8/SecurityPolicy/ to EAP_HOME/bin. When asked to overwrite files, click Replace. 

In rhpam-7.3.0-kie-server-ee8.zip, "SecurityPolicy" directory contains only "security.policy" and "kie.policy". But it's not enough. In order to use "security.policy" and "kie.policy", "SecurityPolicy" directory also should have standalone-secure.sh/standalone-secure.conf (and ".bat" for Windows) just like RHPAM-1255 (which I filed for installer).