About the structure of an Application and Device Control policy